Internet freedom remained constrained in Sri Lanka. Although the government refrained from blocking social media or communications platforms in 2020 and 2021, which enabled Sri Lankans to engage in digital activism around a broad range of issues, the online space for free expression continued to shrink. Journalists and activists reported increased intimidation and harassment, contributing to self-censorship and a more fearful climate. Separately, arrests for online activity related to COVID-19 and environmental issues increased and the police arrested a few individuals without a warrant for their online speech. An online news site became the target of distributed-denial-of-service (DDoS) attacks, while government websites, including the prime minister’s website, were hacked.
Sri Lanka experienced improvements in political rights and civil liberties after the 2015 election of President Maithripala Sirisena, which ended the more repressive rule of Mahinda Rajapaksa. However, the Sirisena administration was slow to implement transitional justice mechanisms needed to address the aftermath of a 26-year civil war between government forces and ethnic Tamil rebels, who were defeated in 2009. Gotabaya Rajapaksa’s election as president in November 2019 and the Sri Lanka Podujana Peramuna’s victory in the August 2020 parliamentary polls have emboldened the Rajapaksa family, which has taken steps to empower the executive and roll back accountability mechanisms for civil war–era rights violations.
- There were no reported blocks or restrictions on internet during the coverage period, allowing Sri Lankan users to increasingly mobilize around a range of issues online (see B8).
- Law enforcement officials increasingly arrested individuals for online posts related to COVID-19, environmental issues, and racial relations in Sri Lanka. The police arrested several individuals without a warrant for their online posts (see C3).
- The state-owned Sri Lanka Telecom (SLT) introduced unlimited data packages which blocked virtual private networks (VPNs), torrents, peer-to-peer (P2P) applications, and messaging app Telegram as part of their terms and conditions (see C4).
- Amid the COVID-19 pandemic, government initiatives for contact tracing and quarantine compliance—including a new smartphone app and the retrieval of personal data from mobile service providers by military intelligence—raised privacy and surveillance concerns (see C5 and C6).
- Government and media organizations continue to be targeted by cyberattacks and hacked. An online news site, Colombo Gazette, was the target of a DDoS attack (see C8).
|Do infrastructural limitations restrict access to the internet or the speed and quality of internet connections?||3.003 6.006|
Score Change: This score declined from 4 to 3 to correct for a methodology error in one of the sources used to calculate internet penetration rates. This score change does not necessarily reflect a change in infrastructural limits to internet access, speed, or quality.
Although internet access has increased in recent years, the speed and quality of service is inconsistent. There was a steady rise in the number of mobile broadband subscriptions during the coverage period. According to the Telecommunications Regulatory Commission of Sri Lanka (TRCSL), there were over 17.2 million mobile broadband subscriptions as of March 2021.1 In the same month, there were over 2.1 million fixed-line broadband subscriptions.
The government is interested in expanding internet access and digital infrastructure projects. In a manifesto, President Gotabaya Rajapaksa laid out plans to make Sri Lanka “digitally inclusive” by 2024; the plans include the development of a high-speed optical transmission system and fifth generation (5G) mobile broadband countrywide, as well as the digitization of more government services using internet-based technologies. 2 The Information and Communication Technology Agency (ICTA) is also focused on improving and lowering the cost of access to the internet and other digital services (see A2).3
Private companies are also working to expand service. In 2019, internet service providers (ISP) Dialog Axiata had over 2,500 pay-to-use Wi-Fi hotspots around the country.4 In July 2020, Dialog invited customers to register devices and use its 5G trial network.5 As of July 2020, Dialog equipped 20 percent of its base stations with 5G technology. In May 2021, SLT announced that it was executing its plan to provide fiber-optic connections nationwide. 6 In July 2020, SLT also announced plans to deploy a fiber-to-home network using Nokia-sourced technology, allowing high-speed services for 200,000 enterprise and residential users.7 Ratings agency Fitch Ratings, however, predicted that SLT’s 5G rollout would be delayed past 2022.8 Hutch, another ISP, successfully rolled out 4G nationwide during 2020.9
- 1Telecommunications Regulatory Commission, “Statistics,” March 2021 https://trc.gov.lk/images/pdf/StatisticalOverViewReportQ1202105052021ab… ,
- 2“Vistas of Prosperity and Splendour,” Gotabaya Rajapaksa December 2019, https://gota.lk/sri-lanka-podujana-peramuna-manifesto-english.pdf
- 3“Current Projects,” Information and Communication Technology Agency, https://www.icta.lk/current-projects/
- 4“Wi-Fi Hotspots in Sri Lanka”, Dialog, https://www.dialog.lk/wi-fi-hotspots
- 5Dialog invites customers to experience the power of 5G on trial network Daily FT July 22, 2020 http://www.ft.lk/it-telecom-tech/Dialog-invites-customers-to-experience…
- 7Nokia and Sri Lanka Telecom deploy next generation fiber network to bring ultra-fast broadband access to customers across the country Ada Derana, July 15, 2020 http://bizenglish.adaderana.lk/nokia-and-sri-lanka-telecom-deploy-next-…
- 8Fitch affirms Sri Lanka Telecom at AA- (lka) outlook stable Fitch Ratings January 17, 2021 https://www.fitchratings.com/research/corporate-finance/fitch-affirms-s…
- 9Hutch announces completion of islandwode network expansion coverage, 4G rollout Daily FT February 26, 2020 http://www.ft.lk/front-page/Hutch-announces-completion-of-island-wide-n…
|Is access to the internet prohibitively expensive or beyond the reach of certain segments of the population for geographical, social, or other reasons?||1.001 3.003|
Mobile internet connectivity is affordable, although gender-based and urban-rural digital divides persist. In a 2019 survey, 25 percent of respondents said cost of data was a limiting factor in internet use. According to cable.co.uk’s 2020 study of global internet prices, Sri Lanka’s average monthly price for fixed-line broadband was 1,872 rupees ($9.58). For comparison, mean household income in Sri Lanka was 62,237 rupees ($341) according to the 2016 Household Income and Expenditure Survey.1 Prices for mobile broadband vary, and Sri Lanka has the 7th cheapest data-only mobile broadband plans in the world.2 According to the International Telecommunication Union (ITU), the cost of high-consumption mobile-data and voice basket packages amounted to less than 1 percent of the country’s gross national income (GNI).3
Urban residents benefit from infrastructural advantages, are better connected to the internet, and are considered relatively more “computer literate.” The province with the highest percentage of households accessing the internet is the Western Province, the country’s most populous,4 where Colombo and other urban areas boast well-developed infrastructure. Government statistics for 2020 found about 45.2 percent of Western Province residents to be “computer literate,”5 a category that excludes those whose only digital literacy is through smartphones or tablets. By comparison, the national digital literacy rate, which includes those able to use any digital device, is 50.1 percent compared to a national computer literacy rate of 32.3 percent— showing the shift away from personal computers.6
The civil war, which ended in 2009, delayed infrastructure development in the Northern and Eastern Provinces. However, the telecommunications infrastructure in these provinces has improved in recent years, leading to steady growth in internet usage. In 2020, 18 percent of Northern Province residents were categorized as computer literate.7 Compared to urban areas, rural and up-country Tamil communities have significantly lower computer and digital literacy rates.8
Schools with digital facilities often lack corresponding digital literacy programs. Only an estimated 40 percent of households with children have an internet connection, and 52 percent of households with children have a smartphone or computer, cutting many students off from e-learning initiatives.9 In February 2021, the Education Ministry’s information technology (IT) director warned only 30 percent of the student population had access to, or could afford, online learning, affecting students who had to adjust to remote learning during COVID-19. The government, however, also broadcasts lessons on television and radio.10 During the pandemic, some children struggled with poor mobile signals while trying to attend online classes.
For a number of years, the ICTA has promoted digital literacy in rural areas by establishing community-based e-libraries and e-learning centers,11 though some local journalists have criticized aspects of the initiative.12 In 2017, the Education Ministry inaugurated the country’s first “cloud smart classroom,” a pilot project for digital interactive learning.13 Those who participated in the cloud smart classroom reported higher attendance rates and performance.14 In February 2021, a US-funded “smart classroom” was opened in the northern city of Vavuniya.15
- 1“The price of fixed-line broadband in 211 countries,” Cable.co.uk,, 2020, https://www.cable.co.uk/broadband/pricing/worldwide-comparison/, “Household Income and Expenditure Survey 2016,” Department of Census and Statistics, 2016, https://web.archive.org/web/20200227130701/http://www.statistics.gov.lk…
- 2“Mobile Broadband Postpaid Plans,” Dialog, https://www.dialog.lk/compare-postpaid-packages, “Plans and Rates – Prepaid,” Mobitel, https://www.mobitel.lk/broadband/plans-and-rates-prepaid, “Day&Night Internet,” Hutch, https://web.archive.org/web/20200610055753/https://hutch.lk/internet/da… and International Telecommunication Union https://www.itu.int/en/ITU-D/Statistics/Dashboards/Pages/IPB.aspx (accessed June 5, 2021)
- 3Mobile data and voice high usage basket Alliance for affordable internet https://a4ai.org/extra/baskets/ITU/2020/mobile_broadband_high_usage_bas… (accessed June 5, 2021)
- 4“Census of Population and Housing – 2012,” Department of Census and Statistics, https://web.archive.org/web/20200229042527/http://www.statistics.gov.lk…
- 5Computer Literacy Statistics -2020 ), Department of Census and Statistics, http://www.statistics.gov.lk/ComputerLiteracy/StaticalInformation/Bulle…
- 6Computer Literacy Statistics -2020 , Department of Census and Statistics, http://www.statistics.gov.lk/ComputerLiteracy/StaticalInformation/Bulle…
- 7Computer Literacy Statistics -2020 , Department of Census and Statistics, http://www.statistics.gov.lk/ComputerLiteracy/StaticalInformation/Bulle…
- 8Computer Literacy Statistics -2020 Department of Census and Statistics, http://www.statistics.gov.lk/ComputerLiteracy/StaticalInformation/Bulle… The historically marginalized Up-country or Malaiyaha Tamil communities trace their roots to Tamil Nadu and are concentrated in the Central, Uva, Sabaragamuwa and Southern Provinces. The Citizenship Acts of 1948-9 made the communities stateless and denied their civil and political rights. “Sri Lanka - Tamils,” World Directory of Indigenous Peoples, Minority Rights Group International, http://minorityrights.org/minorities/tamils/,“Final Report of the Consultation Task Force on Reconciliation Mechanisms,” Consultation Task Force on Reconciliation Mechanisms, 346-350, November 17, 2016, https://drive.google.com/open?id=0Bxbk4wYolphwRTZETF9fM1JBUEk
- 9LirneAsia (@LirneAsia), “The reality of #elearning in #SriLanka…,” Twitter Post, May 12, 2020, https://mobile.twitter.com/LIRNEasia/status/1260124565902102528
- 1070% of Lanka’s students have no access to online study The Sunday Times February 7, 2021 http://www.sundaytimes.lk/210207/news/70-of-lankas-students-have-no-acc… and Sri Lanka school dropout crisis could worsen from coronavirus: thinktank EconomyNext January 2, 2021 https://economynext.com/sri-lanka-school-dropout-crisis-of-poor-kids-co… Azzam Ameen, Twitter, June 21, 2021 https://twitter.com/AzzamAmeen/status/1406904155638165506
- 11“Establishment of Nenasalas,” Nenasala, https://web.archive.org/web/20191003062716/http://www.nenasala.lk/index… and https://www.icta.lk/citizen-empowerment/
- 12“ICTA Responds to Business Times report on e-government project,” The Sunday Times, January 6, 2013, http://www.sundaytimes.lk/130106/business-times/icta-responds-to-busine…
- 13“Sri Lanka launches first ‘cloud smart classroom’,” DailyFT, January 16, 2017, http://www.ft.lk/article/591574/Sri-Lanka-launches-first--cloud-smart-c…-
- 14Mahesh De Andrado, “CodeGen’s XOLO Cloud Smart Classroom is a hit,” Readme, October 5, 2017, http://www.readme.lk/xolo-cloud-smart-classroom-codegen/
- 15Ambassador Teplitz, Twitter posts (February 23, 2021): https://twitter.com/USAmbSLM/status/1364110380495032324 and US Ambassador inaugurates virtual platform to connect schools in Sri Lanka Colombo Page February 23, 2021 http://www.colombopage.com/archive_21A/Feb23_1614092059CH.php
|Does the government exercise technical or legal control over internet infrastructure for the purposes of restricting connectivity?||4.004 6.006|
The government refrained from restricting connectivity and blocking social media platforms during the coverage period. However, the government has blocked social media platforms in the past.
The government blocked social media platforms repeatedly in April and May 2019 in the wake of the Easter Sunday suicide attacks at churches and hotels.1 For nine days directly following the attacks, Facebook, WhatsApp, YouTube, Instagram, Snapchat, and Viber were all blocked, as was at least one popular VPN.2
The government had previously restricted connectivity in the Kandy district following communal violence in March 2018. In response to the violence, the Defense Ministry ordered a nationwide block of Facebook, WhatsApp, Instagram, and Viber.3
Sri Lanka has access to multiple international cables, but most of the landing stations for these cables are controlled by the majority state-owned SLT, giving the government control over internet infrastructure.4 SLT’s capital expenditure was disrupted in 2020 due to COVID-19, but the company is expected to invest in fiber-optic infrastructure in 2021.5 The company is reportedly planning to invest $60 million in the new SEA-ME-WE submarine cable running from Singapore to France.6 In February 2020, a new project to lay a submarine cable system between the Maldives and Sri Lanka was announced; a consortium of telecommunications companies including Dialog Axiata have come together for the project. The cable, built by Huawei Marine Networks, was ready for service in February 2021.7
- 1Max Fisher, “Sri Lanka Blocks Social Media, Fearing More Violence,” The New York Times, April 21, 2019, https://www.nytimes.com/2019/04/21/world/asia/sri-lanka-social-media.ht…; “Social media and messaging apps restored in Sri Lanka,” NetBlocks, April 30, 2019, https://netblocks.org/reports/social-media-and-messaging-apps-restored-…
- 2“VPN services blocked in Sri Lanka as information controls tighten,” Netblocks, April 24, 2019, https://netblocks.org/reports/vpn-services-blocked-in-sri-lanka-as-info…
- 3“All social media sites in the country blocked: TRC,” Sunday Times, March 7, 2018, http://www.sundaytimes.lk/article/1040291/all-social-media-sites-in-the…
- 4“Who We Are – Our geographic, divisional and market capabilities”, SLT, https://www.slt.lk/en/content/profile
- 5Fitch affirms Sri Lanka Telecom at AA- (lka) outlook stable Fitch Ratings January 17, 2021 https://www.fitchratings.com/research/corporate-finance/fitch-affirms-s…
- 6SLT likely to invest $60 mn in upcoming SEA-ME-WE-6 submarine cable system Daily Mirror June 30, 2020 http://www.dailymirror.lk/business-news/SLT-likely-to-invest-US-60mn-in…
- 7$22m Maldives Sri Lanka cable lands in Hulhumale Capacity Media December 16, 2020, https://www.capacitymedia.com/articles/3827247/-22m-maldives-sri-lanka-…-
|Are there legal, regulatory, or economic obstacles that restrict the diversity of service providers?||3.003 6.006|
Sri Lanka’s retail tariffs are among the lowest in the world, though the diversity of service providers is limited due to the dominance of some companies, particularly the majority government-owned provider SLT.
There are three ISPs besides SLT in Sri Lanka.1 SLT remains a key player in the information and communication technologies (ICT) market, and the firm imposes price barriers by forcing competing service providers to lease connectivity from SLT, which charges high rates.2
Dialog Axiata remains the largest mobile service provider, with over 16.9 million subscribers as of June 2021.3 SLT Telecom and Mobitel, a mobile service provider and subsidiary of SLT, reorganized their operations under the SLT-Mobitel brand in January 2021.4 Mobitel is the second largest mobile service provider, with over 7.9 million subscribers at the end of 2020.5 Hutch had the third largest number of subscribers, with over 5.3 million reported in July 2019. In 2020, Hutch reported a 7 percent decrease in active customer accounts.6 Airtel had 2.87 million subscribers in 2021.7
The TRCSL, in April 2021, announced plans to introduce number portability by the end of the year. Number portability will allow customers to change their service providers to get better or more affordable services without changing their phone number. The TRCSL noted that number portability will push ISPs to provide better service in order to retain customers.8
In 2016, SLT announced that it would provide a global connectivity backhauling facility via Sri Lanka, thereby allowing the company to cross-connect to other cable systems and increase capacity.9 In August 2018, the government removed telecommunications floor rates for call charges in hopes of increasing competition among service providers.10
The competitive nature of the market has led to some legal battles. In August 2018, for example, the Commercial High Court rejected Dialog’s petition against SLT, in which Dialog accused SLT of violating intellectual property rights.11
- 1“Internet Service Providers,” TRC, http://www.trc.gov.lk/internet-service-providers.html
- 2Helani Galpaya, “Broadband in Sri Lanka: Glass Half Full or Half Empty?,” The World Bank, 2011, http://documents.worldbank.org/curated/en/876591468331458029/Sri-Lanka-…
- 3“Dialog Axiata Fact Sheet,” Dialog.lk, August 24, 2021, https://dlg.dialog.lk/fact-sheet
- 4“Subsidiaries,” SLT, https://www.slt.lk/en/about-us/profile/subsidaries,“Mobitel finalizes terms of Hutch takeover, report says,” CommsUpdate, February 11, 2014, https://www.commsupdate.com/articles/2014/02/11/mobitel-finalises-terms… and Sri Lanka Telecom & Mobitel join forces making history in global connectivity ColomboPage January 3, 2021 http://www.colombopage.com/archive_21A/Jan03_1609689180CH.php
- 5“Annual report 2020 Sri Lanka Telecom,” Sri Lanka Telecommunications PLC, 2020, https://www.slt.lk/sites/default/files/sustainability_reports/Sri%20Lan…
- 6“Hutch to invest USD 400 million for island wide 4G coverage,” Sunday Observer, July 21, 2019, http://www.sundayobserver.lk/2019/07/21/hutch-invest-200m-islandwide-4g… and 2020 Annual Report CK Hutchison Holdings Ltd https://doc.irasia.com/listco/hk/ckh/annual/2020/ar2020.pdf
- 7“Integrated report and annual financial statements 2020-2021 Bharti Airtel Limited https://assets.airtel.in/teams/simplycms/web/docs/Airtel-Integrated_Rep… /
- 8Number portability will break customer ‘lock-in’ practice at telcos: TRCSL Daily Mirror 28 April 2021 http://www.dailymirror.lk/business-news/Number-Portability-will-break-c…
- 9“SLT to provide global connectivity backhauling facility via Sri Lanka,” SLT, http://www.slt.lk/en/content/slt-provide-global-connectivity-backhaulin…
- 10“Govt removes telecom floor rates,” Daily FT, August 20, 2018, http://www.ft.lk/front-page/Govt--removes-telecom-floor-rates/44-661221.
- 11“Court dismisses Dialog Broadband’s petition against SLT,” Daily News, August 18, 2018, http://www.dailynews.lk/2018/08/18/law-order/160040/court-dismisses-dia…
|Do national regulatory bodies that oversee service providers and digital technology fail to operate in a free, fair, and independent manner?||0.000 4.004|
The national regulatory bodies overseeing service providers lack independence, and frequently do not act in a fair manner.
The TRCSL was established under the Sri Lanka Telecommunications (Amendment) Act, No. 27 of 1996. As the national regulatory agency for telecommunications, the TRCSL’s mandate is to ensure the provision of effective telecommunications, protect the interests of the public, and maintain effective competition between service providers.
In November 2020, the TRCSL, the ICTA, and several other bodies were brought under the Technology Ministry, which is directly under presidential purview. Previously, in December 2019, President Rajapaksa issued a gazette notification that the TRCSL would be brought under the purview of the Defense Ministry, a reorganization that heightened concerns about the TRCSL’s independence and about potential government surveillance projects.1 As the TRCSL remains under presidential purview through the Technology Ministry, there are continued concerns about the regulatory body’s independence.2
The TRCSL has been criticized in the past for poor regulatory practices, lack of transparency in recommending whether a telecommunications provider should receive a license, and instances of preferential treatment.3 Analysts have asserted that spectrum allocation and refarming— the more efficient reallocation of spectrum— have been administered in an ad hoc manner, but procedural transparency has improved over time.4 However, regulatory reforms to improve the TRCSL’s performance and increase its independence are still necessary.
Under former president Mahinda Rajapaksa, many of the TRCSL’s interventions to restrict online content and pronouncements on strengthening internet regulations were partisan and extralegal.5 In 2017, the Colombo High Court found former TRCSL chairperson Anusha Palpita and former presidential secretary Lalitha Weeratunga guilty of misappropriating TRCSL funds for Rajapaksa’s presidential campaign. They received three-year prison sentences and fines that year. In November 2020, however, they were acquitted on appeal.6 In the interim, a travel ban imposed against Weeratunga was temporarily lifted to allow him to travel to India along with Rajapaksa.7
Successive regimes have largely chosen political allies to head the TRCSL. The current acting chairman is Jayantha de Silva, secretary to the Technology Ministry. The current director general, Oshada Senanayake, was appointed in November 2019 and is the former head of a software company;8 Senanayake publicly advocated for a Gotabaya Rajapaksa presidency when speaking to a convention of academics and professionals.9 In December 2019, secretary to the Defense Ministry, and former military officer Kamal Gunaratne, was appointed chairman of the TRCSL, demonstrating another example of the president giving the post to political and military associates.
- 1“The Gazette of the Democratic Socialist Republic of Sri Lanka,” Department of Government Printing, December 12, 2019, http://documents.gov.lk/files/egz/2019/12/2153-12_E.pdf
- 2Gotabaya to take over Defence, Tech Ministries Daily FT November 23, 2020, https://www.ft.lk/front-page/Gotabaya-to-take-over-Defence-Tech-Ministr…
- 3Malathy Knight-John, “Telecom Regulatory and Policy Environment in Sri Lanka: Results and Analysis of the 2008 TRE Survey,” Institute of Policy Studies, November 26, 2008, http://lirneasia.net/wp-content/uploads/2009/07/TRE_SriLanka_Final_2008…
- 4“TRC raises Rs. 3.28 bn from LTE mobile spectrum auction”, DailyFT, March 29, 2013, http://www.ft.lk/front-page/trc-raises-rs-3-28-b-from-lte-mobile-spectr…, “Issuance of Licenses,” Telecommunications Regulatory Commission of Sri Lanka, http://www.trc.gov.lk/component/k2/itemlist/category/66-issuance-of-lic…
- 5“Colombo Telegraph blockade: TRC clueless,” Daily FT, August 27, 2013, http://www.ft.lk/article/181608/Colombo-Telegraph-blockade--TRC-clueless, Sarath Kumara, “Sri Lankan government prepares new Internet restrictions,” World Socialist Web Site, February 15, 2010, https://www.wsws.org/en/articles/2010/02/slmd-f15.html
- 6“Lalith Weeratunga and Anusha Palpita acquitted in sil cloth case,” NewsFirst, November 19, 2020 https://www.newsfirst.lk/2020/11/19/lalith-weeratunga-and-anusha-palpit…
- 7“Court permits Lalith Weeratunga to go abroad,” Daily News, November 23, 2019, https://www.dailynews.lk/2019/11/23/law-order/203653/court-permits-lali…
- 8“ICTA Board further strengthened by leading industry tech personalities” Daily FT 20 August 2020 https://www.ft.lk/front-page/ICTA-Board-further-strengthened-by-leading… and TRCSL Director General assumes duties Daily News 22 November, 2019 https://www.dailynews.lk/2019/11/22/local/203577/trcsl-director-general…
- 9“Defence Secretary takes post as TRC Chairman,” Daily FT, December 7, 2019, http://www.ft.lk/front-page/Defence-Secretary-takes-office-as-TRC-Chair…
|Does the state block or filter, or compel service providers to block or filter, internet content, particularly material that is protected by international human rights standards?||4.004 6.006|
The government does not systematically block or filter websites and other forms of online content, although a few independent websites and other sites are blocked. Authorities have previously blocked social media and communications platforms.
SLT’s unlimited data packages, which became available in April 2021, blocks torrents, P2P applications, and Telegram under their terms and conditions (see C4).
Lankaenews remained blocked on Dialog connections during the coverage period, although it was accessible on SLT connections. The website was reportedly first blocked for publishing stories critical of then president Sirisena.1
During the coverage period, tests from the internet censorship organization OONI revealed signs of HTTP blocking for several websites. Sankanthi24.com, a Tamil news site, first showed signs of being blocked in June 2020 and continued to show signs as of June 2021 on Dialog and SLT connections, though it was accessible outside the country.2 Adult dating site adultfriendfinder.com also showed signs of HTTP blocking on Dialog connections starting from September 2020 to June 2021, though it was accessible on SLT.3 The official website of the US Navy’s Sea, Air, and Land (SEAL) teams showed signs of TCP/IP blocking from June 2020 to June 2021 on both Dialog and SLT connections, but remained accessible outside the country.4 US-based news site Jezebel appeared to have been affected by domain name system (DNS) tampering on Dialog connections from September 2020 to June 2021.5
Separately, the government has blocked websites that address health and intimate issues. Teen health, relationship, and sexuality site teenhealthfx.com, which showed signs of DNS tampering in the previous coverage period, is now accessible on both Dialog and SLT connections.The government previously blocked social media and communication platforms three times in April and May 2019, in the aftermath of the Easter Sunday attacks, and once for over a week in March 2018 in response to violence in Kandy (see A3). Authorities claimed the restrictions were necessary to stop the spread of disinformation and hateful content, as well as limit sectarian violence during the politically tense weeks and months following the attacks.6 The restrictions, however, prevented access to independent news sources and limited users’ ability to contact those in areas affected by the crisis.7
- 1Raisa Wickrematunge, “RTI Reveals Lanka E News Blocked on Order from President’s Office,” Groundviews, April 11, 2018, https://groundviews.org/2018/04/11/lanka-e-news-blocked-on-order-from-p…
- 2Ooni explorer, “Sri Lanka: Web Connectivity,” https://explorer.ooni.org/search?probe_cc=LK&until=2021-02-13&since=202…, Ooni explorer, “Anomaly www.sankathi24.com,”https://explorer.ooni.org/measurement/20200608T205301Z_AS9329_dbFWfZt6m… ;
- 3Ooni explorer, ‘Anomaly www.adultfriendfinder.com,’ https://explorer.ooni.org/measurement/20200916T214950Z_AS45356_a5CXv2DQ…
- 4Ooni explorer, ‘Anomaly www.sealswcc.com,’ https://explorer.ooni.org/measurement/20200621T034313Z_AS9329_xEUY9BAsG…
- 5Ooni explorer, ‘Anomaly www.jezebel.com’ https://explorer.ooni.org/measurement/20200913T203317Z_AS18001_0jGOx93H…
- 6“Sri Lanka blocks social media for third time in a month,” Netblocks, May 13, 2019, https://netblocks.org/reports/sri-lanka-blocks-social-media-for-third-t…, Max Fisher, “Sri Lanka Blocks Social Media, Fearing More Violence,” The New York Times, April 21, 2019, https://www.nytimes.com/2019/04/21/world/asia/sri-lanka-social-media.ht….
- 7Louise Matsakis, Issie Lapowsky, “Don’t Praise the Sri Lankan Government for blocking Facebook”, WIRED, April 23, 2019, https://www.wired.com/story/sri-lanka-bombings-social-media-shutdown/.
|Do state or nonstate actors employ legal, administrative, or other means to force publishers, content hosts, or digital platforms to delete content, particularly material that is protected by international human rights standards?||3.003 4.004|
In recent years, the Sri Lankan government has considered instituting a legal framework to curb online speech it considers discriminatory along with speech it considers misleading. The government also issued takedown requests during the reporting period.
Between July and December 2020, Facebook temporarily restricted access to 1,643 items to adhere to election guidelines related to that August’s parliamentary polls. Election guidelines restrict candidates and supporters from campaigning in the two days before polling. Facebook also restricted access to one piece of content for violating privacy laws.1 In the same period, Google received 39 removal requests, including 9 requests over accusations of defamation, 8 over privacy or security concerns, 7 over nudity or adult content, 3 over harassment, 3 involving criticism of the government, and 3 involving religious content. Google also received 1 request each in categories of copyright, electoral, hate speech, impersonation, violence, and “other.” One request came from the Criminal Investigations Department (CID) about two Blogger posts that were allegedly defaming a business. Google, however, did not comply with this request.2 Twitter reported one legal demand to remove content between January and June 2020, to which it did not comply.
After the presidential election in November 2019, the Defense Ministry announced that a new mechanism would be introduced to immediately remove social media posts that were defamatory or spread ethnic– or religious-based hatred. In November 2020, the government again announced its intention to introduce a regulatory framework based on Singapore's Protection from Online Falsehoods and Manipulation Act, aimed at curbing hate speech and misinformation.3 In April 2021, the cabinet was granted approval to draft laws to curb false and misleading online posts.4 In December 2020, the government announced its intention to register foreign digital operators, although there have been no further updates on this effort.5
- 1Facebook Transparency Report January-June 2020 https://transparency.facebook.com/content-restrictions/country/LK
- 2Google transparency report “Government requests to remove content: Sri Lanka.” https://transparencyreport.google.com/government-removals/by-country/LK…
- 3New S’pore style regulatory framework for Sri Lanka websites; activists concerned EconomyNext November 24, 2020 https://economynext.com/new-spore-style-regulatory-framework-for-sri-la…
- 5“Sri Lanka drafting laws to control social media: Defence Ministry,” EconomyNext January 27, 2020, https://economynext.com/sri-lanka-drafting-laws-to-control-social-media… , “New laws to prevent publishing defamatory posts on social media,” Colombo Gazette, January 23, 2020, https://colombogazette.com/2020/01/23/new-laws-to-prevent-publishing-de… and Government will not register all social media users, only foreign operators; Keheliya EconomyNext December 21, 2020 https://economynext.com/govt-will-not-register-all-social-media-users-o…
|Do restrictions on the internet and digital content lack transparency, proportionality to the stated aims, or an independent appeals process?||2.002 4.004|
There is a lack of transparency around restrictions of online content, but a 2017 right to information (RTI) request revealed some of the government’s blocking procedures.1 The government’s response revealed that blocking orders can originate from the Mass Media Ministry and the Presidential Secretariat for a number of reasons, including “publishing false information” and “damaging the president’s reputation.”2 Orders are then sent to the TRCSL, which instructs ISPs to block the content. The TRCSL denied part of the RTI request on national security grounds, and an appeal of the case was heard before the RTI Commission in the spring of 2018.3 There are no records of ISPs challenging the TRCSL’s blocking orders at the commission itself or through the court.
It is not clear if the TRCSL can impose financial or legal penalties on telecommunications companies that do not comply with blocking orders, since the conditions of such orders are unknown to the public. Under the Telecommunications Act, ISPs are licensed by the Telecommunications Ministry, but the TRCSL can make recommendations on whether a license should be granted. The ministry can impose conditions on a license, requiring the provider to address any matter considered “requisite or expedient to achieving” TRCSL objectives.4
There is no independent body regulating content, which leaves limited avenues for appeal (see A5). Content providers have filed fundamental rights applications with the Supreme Court to challenge blocking orders,5 but under former president Mahinda Rajapaksa, the lack of public trust in the politicized judiciary and fear of retaliatory measures presented significant obstacles for would-be petitioners.6
Following the Easter Sunday attacks, the government claimed it would introduce new social media regulations. In December 2020, the government further explained it was considering introducing registration requirements for foreign digital operators. No concrete legislation, however, had been passed as of June 2021.7
There have been increasing efforts from domestic actors—including government officials, civil society, and fact checkers—to work with international technology companies. For example, in March 2020, Facebook committed to removing false claims or conspiracy theories flagged by global and local health authorities related to COVID-19.8 Also in March, it was reported that the Elections Commission (EC) would be working with officials from Facebook, Twitter, and YouTube to monitor content during the August polls and to ensure the platforms would not be misused for content like hate speech.9 A report from youth group Hashtag Generation noted that Facebook did remove several instances of election-related hate speech, false news, and targeted harassment reported to them by the EC during the elections.10
Previously, during the 2019 presidential elections, Facebook committed to removing content that would deter people from voting.11 Separately, ahead of the vote, the EC warned that it would take legal action against electronic and online media organizations spreading false content or hate speech.12
Facebook’s content-removal policies generated controversy in the aftermath of communal violence in March 2018. Facebook was criticized for failing to remove hateful Sinhala-language content that analysts argued encouraged anti-Muslim violence.13 In June 2018, Facebook representatives met with local civil society activists and committed to improve their language capabilities to better moderate content.14 In March 2020, critics pointed out that, as moderators transitioned to working from home, posts promoting misinformation on Facebook continued to be shared more than credible news, despite the platform pledging to remove some types of misleading content.15 In May 2020, Facebook apologized for its role in the communal violence targeting Muslims in 2018, and released a human rights impact assessment report, which highlighted that the automated detection of hate speech in Sinhala and reporting channels within Facebook Messenger had been improved with added policy and language expertise.16 The report made several recommendations on accountability, changes to platform architecture and grievance mechanisms, and improving community standards. Some recommendations drew mixed reactions from members of civil society, who noted shortfalls in terms of guidance in local languages for Sri Lankan users.17
Civil society organizations previously criticized a January 2019 meeting between senior Facebook employees and government officials including then-president Sirisena, former president Mahinda Rajapaksa, and then prime minister Ranil Wickremesinghe.18 The meeting was ostensibly about disinformation, although activists were concerned that the participants focused on content moderation and censorship.
- 1Raisa Wickrematunge, “Blocked: RTI Requests reveal process of blocking websites in Sri Lanka,” Groundviews, December 8, 2017, https://groundviews.org/2017/12/08/blocked-rti-requests-reveal-process-…
- 2Raisa Wickrematunge, “Blocked: RTI requests reveal process behind blocking of websites in Sri Lanka,” Groundviews, December 8, 2017, https://groundviews.org/2017/12/08/blocked-rti-requests-reveal-process-…; Raisa Wickrematunge, “RTI Reveals Lanka E News Blocked on Order from President’s Office,” Groundviews, April 11, 2018, https://groundviews.org/2018/04/11/lanka-e-news-blocked-on-order-from-p….
- 3Groundviews (@groundviews), “Our appeal to #RTI Commission on blocking of Lankaenews website will be taken up in the next two weeks. #lka #SriLanka,” Twitter Post, February 16, 2018, https://twitter.com/groundviews/status/964428832798208000.
- 4“Arbitrary Blocking and Registration of Websites: The Continuing Violation of Freedom of Expression on the Internet,” Centre for Policy Alternatives, November 9, 2011, https://www.cpalanka.org/wp-content/uploads/2011/11/FINAL-FOE-STATEMENT…
- 5In 2011, one website operator who challenged blocking settled out of court, agreeing to several TRC conditions—such as removing links to blocked content—in return for restored access. After a complaint was made to the Human Rights Commission of Sri Lanka about the blocking of two websites in May 2014, the commission said it would investigate, but that freedom of expression was subject to constitutional limits. S.S. Selvanayagam, “Website previously blocked now permitted to operate by SC,” DailyFT, December 16, 2011, http://www.ft.lk/article/60774/Website-previously-blocked-now-permitted…, Waruni Karunarathne, “HRC To Study Complaint on Websites,” The Sunday Leader, http://www.thesundayleader.lk/2014/05/25/hrc-to-study-complaint-on-webs…
- 6International Crisis Group, “Sri Lanka’s Judiciary: Politicised Courts, Compromised Rights,” June 30, 2009, https://www.crisisgroup.org/asia/south-asia/sri-lanka/sri-lanka-s-judic…
- 7Disna Mudalige, “Laws to regulate social media soon,” Daily News, June 1, 2019, http://www.dailynews.lk/2019/06/01/local/187191/laws-regulate-social-me….
- 8“Facebook takes action against misinformation on COVID-19 and keep people safe and informed in Sri Lanka,” Daily Mirror, March 19, 2020, http://www.dailymirror.lk/business/Facebook-takes-action-against-misinf…
- 9“Facebook, Twitter and YouTube to monitor social media campaigns during election period,” NewsFirst, March 8, 2020, https://www.newsfirst.lk/2020/03/08/facebook-twitter-and-youtube-to-mon…
- 10Sri Lanka: social media and electoral integrity, Hashtag Generation https://drive.google.com/file/d/1qQKubeK1HtAtom3J5v2BKoQ5hToH9ma_/view?… (accessed on February 26, 2021)
- 11Natasha Jog, “Facebook’s commitment to Sri Lankan election,” Daily Mirror, October 10, 2019, http://www.dailymirror.lk/features/Facebooks-commitment-to-Sri-Lanka-el…
- 12Chamikara Weerasinghe,“EC warns social media to stop hate speech and fake news,” Daily News, September 10, 2019, https://www.dailynews.lk/2019/09/10/local/196533/ec-warns-social-media-…
- 13Amantha Pereza, Zaheena Raheed, “Did Sri Lanka’s Facebook ban help quell anti Muslim violence?,” Al Jazeera, March 14, 2018, https://www.aljazeera.com/news/2018/03/sri-lanka-facebook-ban-quell-ant….
- 14“FB staff to learn Sinhala insults after Sri Lanka riots,” Daily Mirror, June 7, 2018, http://www.dailymirror.lk/article/FB-staff-to-learn-Sinhala-insults-aft….
- 15Hashtag Generation Social Media Monitoring Report: May 2021 https://dl.orangedox.com/May2021-SMM-HG (accessed 20 May 2021) and Sanjana Hattotuwa, Twitter https://twitter.com/sanjanah/status/1239750072801214464
- 16“Assessing the human rights impact of the Facebook platform in Sri Lanka Business and Human Rights Resource Centre 12 May 2020 https://www.business-humanrights.org/en/latest-news/assessing-the-human… and Facebook’s apology for its role in Sri Lanka’s anti-Muslim riots should spark change The Diplomat May 15, 2020 https://thediplomat.com/2020/05/facebooks-apology-for-its-role-in-sri-l…
- 17“Facebook’s Human Rights Impact Assessment (HRIA) on Sri Lanka: Some brief thoughts ICT4Peace May 13, 2020 https://ict4peace.wordpress.com/2020/05/13/facebooks-human-rights-impac…
- 18“Concerns around and challenges arising from Facebook’s communications policy in Sri Lanka,” Centre for Policy Alternatives, January 28, 2019, https://www.cpalanka.org/concerns-around-and-challenges-arising-from-fa….
|Do online journalists, commentators, and ordinary users practice self-censorship?||2.002 4.004|
While self-censorship by journalists declined under the former Sirisena administration, journalists have since proceeded with caution when reporting on subjects that are considered sensitive.
In February 2021, UN High Commissioner for Human Rights Michelle Bachelet raised concerns that the surveillance and harassment reported by over 40 civil society organizations was having a “chilling [effect on] civic and democratic space and leading to self-censorship.”1 Following the November 2019 election of President Gotabaya Rajapaksa, journalists and activists reported an increase in self-censorship around political issues. In previous years, journalists have noted a tendency to self-censor when covering the president and the first family.2 Harassment and intimidation leveled against journalists may also contribute to self-censorship (see C7).
Gihan Nicholas—who works for the news site NewsHub, which had criticized the Rajapaksas ahead of the election—reported that after the vote, “The mood is one of self-censorship. [Journalists are] holding back.”3 Members of Tamil and Sinhala media outlets have reportedly faced increasing pressure from officials and are increasingly self-censoring.4 Journalists from the Tamil daily Thinakkural and the English-language Daily Express said they were hesitant to criticize the Rajapaksas; Thinakkural journalists reportedly considered rights violations, the army, corruption, missing people, and land appropriation to be “sensitive” topics. The Committee to Protect Journalists (CPJ) also noted that at least two journalists went into exile following the presidential election.5 Separately, a few prominent anonymous Twitter accounts sharing satirical or other forms of political speech, notably on Tamil issues or focused on the north of the country, closed their accounts due to security concerns.6
Under former president Sirisena, self-censorship by journalists online appeared to be decreasing, in part due to the government’s stated commitment to press freedom. Both traditional and online media outlets expressed a diversity of political viewpoints, including criticism of the government.
- 1Sri Lanka on alarming path towards recurrence of grave human rights violations – UN report Office of the High Commissioner 27 January 2021 https://www.ohchr.org/EN/NewsEvents/Pages/DisplayNews.aspx?NewsID=26695…
- 2US Department of State, “2018 Country Reports on Human Rights Practices,” https://www.state.gov/reports/2018-country-reports-on-human-rights-prac….
- 3“How fear set in overnight in Sri Lanka,” BBC, February 26, 2020, https://www.bbc.com/news/world-asia-51555853 (accessed on February 29, 2020)
- 4Mario Arulthas, “Trouble brews in post-election sri Laka,” Al Jazeera, December 9, 2019, https://www.aljazeera.com/indepth/opinion/trouble-brews-post-election-s…
- 5Aliya Iftikhar, “Sri Lankan Journalists turn to self-censorship under Rajapaksas as hope for justice fades,” Committee to Protect Journalists April 28, 2020, https://cpj.org/blog/2020/04/sri-lankan-journalists-turn-to-self-censor…
- 6Mahinda Rox, (@mahindarox), “Account suspended,” Twitter, https://twitter.com/mahindarox, Philip Friedrich (@mrpils7), “and now I see the enigmatic @maratnasiri has left twitter. a growing pall is cast over the #LKA media landsape…,” Twitter Post, November 22, 2019, https://twitter.com/mrpils7/status/1197910667707047936, கரிகாலன் garikaalan (@garikaalan), “Decided to leave this platform for a while due to security concerns couples with systematic racist-hatred-threatening campaign leveled against me soon…,” Twitter Post, November 21, 2019, https://twitter.com/garikaalan/status/1197543839046615042
|Are online sources of information controlled or manipulated by the government or other powerful actors to advance a particular political interest?||2.002 4.004|
The spread of disinformation and misinformation has been a growing concern in recent years. A 2020 report from the Oxford Internet Institute identified Sri Lanka as having permanent cybertroop teams that manipulated information on Facebook, Twitter, and YouTube on behalf of politicians and political parties.1 The report found evidence that Sri Lankan teams work to support preferred messaging, attack the opposition, create division, and suppress critical content.
Disinformation increased in the lead-up to and during the August 2020 elections, including some originating from political parties and candidates. For example, one candidate implied that the elections commissioner was attempting to limit voter turnout in an interview shared on Facebook. Several political candidates also questioned the integrity of the vote-counting process on social media. 2
- 1Samantha Bradshaw, Hannah Bailey & Philip N. Howard. (2021) Industrialized Disinformation: 2020 Global Inventory of Organised Social Media Manipulation. Working Paper 2021.1. Oxford, UK: Project on Computational Propaganda. https://demtech.oii.ox.ac.uk/wp-content/uploads/sites/127/2021/02/Cyber…
- 2Sri Lanka: social media and electoral integrity, Hashtag Generation https://drive.google.com/file/d/1qQKubeK1HtAtom3J5v2BKoQ5hToH9ma_/view?… (accessed on February 26, 2021)
|Are there economic or regulatory constraints that negatively affect users’ ability to publish content online?||2.002 3.003|
Some government regulations threaten the economic viability of online publishers and start-up platforms.1 In late 2019, the government issued new guidelines for media accreditation that include websites and online journalists covering news and current events.2 Beginning in 2020, a special committee appointed by the director general of government information would issue media cards, and websites were required to register with the Mass Media Ministry.3 Websites that have not registered do not receive media accreditation, which restricts them from covering certain events and hinders their field reporting. The purported purpose of the guidelines is to ensure better media practices.
The government also maintained news site registration requirements introduced by previous administrations. During Mahinda Rajapaksa’s presidency, the Mass Media Ministry directed all news sites to register for a fee of 25,000 rupees ($130), with an annual renewal fee of 10,000 rupees ($53).
- 1“Rs.100,000 to be Charged from News Websites,” Daily Mirror, July 12, 2012, http://www.dailymirror.lk/20228/cabinet-approves-to-amend-the-press-cou…
- 2“Media Accreditation Form,” Sri Lanka News, https://www.news.lk/images/pdf/2020/ministry_1213.pdf
- 3“New guidelines for issuance of 2020 official media accreditation cards,” Daily FT, December 9, 2019, http://www.ft.lk/news/New-guidelines-for-issuance-of-2020-official-medi… and “Media Accreditation Form” Department of Government Information https://www.dgi.gov.lk/images/pdf/2021/staff_english.pdf
|Does the online information landscape lack diversity and reliability?||3.003 4.004|
Diverse content is generally available online. Social media and communication platforms and blogs are popular and widely available, diversifying the media landscape and spurring local debate. Diverse sources of information online in English, Sinhala, and Tamil are available, including on socioeconomic and political issues, despite a history of censorship and instances of intimidation targeting online journalists during the reporting period (see C7).
Sri Lankans rely on several online outlets or companion websites for news and information, which are local and regional in scope. Roar Media reports on political, social, and economic issues.1 Sites such as Groundviews, Vikalpa, and Maatram highlight citizen-generated content.2 The nonprofit manthri.lk monitors elected officials’ participation and attendance, the diversity of issues they discuss, and their contributions to legislative functions.3 Additionally, the online news magazine Counterpoint, which launched in February 2018, focuses on long-form journalism and investigative and political content.4 South Asian political and cultural magazine Himal Southasian launched a website and membership model in January 2020.5 The Sinhala newspaper and website Anidda, which launched in April 2018,6 was one of the few outlets to criticize the ruling party during that year’s constitutional crisis.7 There have been a number of new initiatives from nonprofits, such as Divide, which examines the gaps between Sinhala– and Tamil-language newspapers in their reporting on gender, minority groups, transitional justice, and political reconciliation,8 Minor Matters, a website dedicated to upholding the freedom of religion and belief.9
Some news sources became unavailable to Sri Lankan users during the coverage period. The British Broadcasting Corporation (BBC) announced the shutdown of Sinhala-language radio program Sandeshaya in December 2020, as part of its efforts to move BBC Sinhala online. As a result of this transition, individuals in rural communities without internet access will lose access to BBC content.10 ReadMe, a site which offers news on technology and start-ups appeared to be inactive in May 2021.
Misinformation spread by ordinary users is a problem in Sri Lanka. For instance, false posts touting coronavirus cures and claiming that Sri Lanka had eradicated the virus circulated online in March 2020.11 Once the country’s vaccination program began, posts encouraging Sri Lankans to use herbal remedies instead of vaccines circulated online. These posts included misrepresented quotes of an opposition leader stating that the Oxford University–AstraZeneca vaccine was generally ineffective; he actually stated that the vaccines were ineffective only against new COVID-19 variants.12 Following the 2019 Easter Sunday bombings, false and manipulated information was quickly shared online.13 For example, rumors spread that the water supply in Hunupitiya was poisoned, while a fake Facebook page masquerading as the police spread rumors that users could be arrested if they used VPNs.14
Platforms such as Facebook have amplified and spread inflammatory speech.15 Following communal riots in Ampara and Digana, Facebook’s slow response to inflammatory online speech, such as content that implored followers to “kill all Muslims, don’t even save an infant,” became an international concern. The platform has since introduced a misinformation policy in July 2018 (see B3).16
- 1“About Roar Media,” Roar.lk, https://roar.global/roar-media/about/.
- 2“#UPRLKA: Complete Tweet Archive and Related Visualisation Around Sri Lanka’s UPR Review,” Groundviews, November 2, 2012, https://groundviews.org/2012/11/02/uprlka-complete-tweet-archive-and-re…, “Announcing the launch of Maatram: Citizen journalism in Tamil,” Groundviews, January 20, 2014, https://us2.campaign-archive.com/?u=746409e6de7b1c2a97474620a&id=855e4e…
- 3“How it works,” Manthri.lk, http://www.manthri.lk/en/how.
- 4“Home,” Counterpoint, http://counterpoint.lk/.
- 5“Main page,” Himal Southasian, https://www.himalmag.com/
- 6“Anidda to be launched in April 29,” Sunday Observer, April 22, 2018, http://www.sundayobserver.lk/2018/04/22/news/anidda-be-launched-april-29.
- 7Nalaka Gunawardena (@NalakaG), “.10/ While most mainstream media play it safe, a handful of courageous journalists & editors look for ways to express dismay. @aniddanewspaper makes the boldest statement: blackened frontpage & defiant editorial,” Twitter Post, November 11, 2018, https://twitter.com/NalakaG/status/1061530775437201410.
- 8“Home,” Divide, http://divide.lk/.
- 9“Who we are” Minor Matters https://www.minormatters.org/en/who-we-are
- 10‘Concern over the shutting down of “Sandeshaya” radio broadcast’ IFEX 6 December 2020 https://ifex.org/sri-lanka-concern-over-the-shutting-down-of-sandeshaya…
- 11“Sri Lanka,” AFP Factcheck, https://factcheck.afp.com/afp-sri-lanka
- 12Anti-vaxxer claims circulate online in Sri Lanka as island nation prepares for coronavirus vaccination drive AFP Factcheck Sri Lanka February 11, 2021 https://factcheck.afp.com/anti-vaxxer-messages-circulate-online-sri-lan… and Facebook posts misrepresent Sri Lankan politician’s comments on COVID-19 vaccine AFP Factcheck Sri Lanka 19 February 2021 https://factcheck.afp.com/facebook-posts-misrepresent-sri-lankan-politi…
- 13“Local police and a mosque trustee said the incident was unlikely to have been politically motivated,” AFP Fact Check, November 21, 2019, https://factcheck.afp.com/local-police-and-mosque-trustee-said-incident…
- 14Yudhanjaya Wijeratne, “The Social Media Block Isn’t Helping Sri Lanka,” Slate, April 25, 2019, https://slate.com/technology/2019/04/sri-lanka-social-media-block-disin….
- 15Amanda Taub, Max Fisher, “Where Countries are Tinderboxes and Facebook is a match,” The New York Times, April 21, 2018, https://www.nytimes.com/2018/04/21/world/asia/facebook-sri-lanka-riots….
- 16Casey Newton, “Facebook says it will begin removing misinformation that leads to violence,” The Verge, July 18, 2018, https://www.theverge.com/2018/7/18/17588624/facebook-misinformation-rem…
|Do conditions impede users’ ability to mobilize, form communities, and campaign, particularly on political and social issues?||5.005 6.006|
Score Change: The score increased from 4 to 5 because there was a lack of internet shutdowns, social media blocks, or other internet restrictions, enabling Sri Lankan users to mobilize around a range of issues, during the coverage period.
The web has provided an avenue for robust digital activism and engagement on political issues in Sri Lanka, although most campaigns register uneven progress in achieving their goals. Many online campaigns are prompted by discrete events, crises, or stalled political processes, and campaigners are generally unable to gather the momentum needed to drive meaningful change and long-term citizen participation.
In the lead-up to and during the 2019 presidential election, people used the hashtags #PresPollSL and #PresPollLKA to discuss the vote and candidates online. Following the Easter Sunday attacks during the previous coverage period, users disseminated developments online through hashtags such as #EasterSundayAttacksLK. Several hashtags were used for the August 2020 elections, including #GenElecSL, #GenElecSL2020, #LKAElections2020 and #lkaParliament, as well as several hashtags in Sinhala and Tamil.1
Activists and civil society groups used the hashtag #DisappearedSL to draw attention to and track the protests by families of those who disappeared across the nation’s north and east during the civil war.2 The hashtag #1000wagehike has been used to highlight wage negotiations for estate workers and the continued marginalization of those workers, particularly among Malaiyagha Tamils.3 The hashtag #StopForcedCremations was used by people to protest the government policy of cremating those who died due to COVID-19 without giving their families the option of burial. People used the hashtag and posted photos of white cloth online to show solidarity with offline protests.4 5 Activists also used different hashtags, including #justiceforhejaaz and #FreeAhnaf, to highlight cases of detention under the controversial Prevention of Terrorism Act (PTA).6 Women in media also shared experiences of sexual harassment at their workplaces using the #MeToo hashtag.7
The government did not allow the Tamil-language version of the national anthem to be sung on February 4, 2020, when Sri Lanka celebrates its independence, marking the first time that version was banned since 2015. A group of activists gathered to sing the national anthem in Tamil. The video was shared on social media and received some pushback.8
- 1#GenElecSL https://twitter.com/hashtag/GenElecSL #GenElecSL2020 https://twitter.com/search?q=%23GenElecSL2020 #LKAElections2020 https://twitter.com/search?q=%23LKAElections2020 #පාර්ලිමේන්තුමහාමැතිවරණය2020 https://twitter.com/hashtag/%E0%B6%B4%E0%B7%8F%E0%B6%BB%E0%B7%8A%E0%B6%… and #பாராளுமன்றதேர்தல்2020 https://twitter.com/hashtag/%E0%AE%AA%E0%AE%BE%E0%AE%B0%E0%AE%BE%E0%AE%…
- 2#DisappearedSL, Twitter Posts, https://twitter.com/hashtag/disappearedsl.
- 3#1000wagehike, Twitter Posts, https://twitter.com/hashtag/1000wagehike.
- 4#StopForcedCremations, Twitter Posts, https://twitter.com/hashtag/stopforcedcremations
- 5Amalini de Sayrah, Twitter posts: https://twitter.com/Amaliniii/status/1338358789800595456 (accessed 26 February 2021)
- 6#justiceforhejaaz, Twitter Posts, https://twitter.com/hashtag/justiceforhejaaz and #FreeAhnaf, Twitter Posts, https://twitter.com/hashtag/freeahnaf and Justice For Hejaaz, Twitter, https://twitter.com/Justice4Hejaaz
- 7Sri Lanka’s MeToo movement sparks reflection in newsrooms The Hindu June 24, 2021 https://www.thehindu.com/news/international/sri-lankas-metoo-moment-spa…
- 8Daily Mirror @Dailymirrir_SL, “A group of activists gathere at the Borella…,” Twitter Post, February 5, 2020, https://twitter.com/Dailymirror_SL/status/1225015753717534720
|Do the constitution or other laws fail to protect rights such as freedom of expression, access to information, and press freedom, including on the internet, and are they enforced by a judiciary that lacks independence?||2.002 6.006|
Although internet access is not guaranteed as a fundamental right in legislation, Article 14 (1)(a) of the constitution protects freedom of expression, subject to restrictions related to the protection of national security, public order, racial and religious harmony, and morality. There are no specific constitutional provisions guaranteeing freedom of expression online. In 2019, the government moved to restrict free expression and press freedom with the implementation of emergency regulations and the approval of new amendments targeting false information online (see C2).
In January 2021, the cabinet approved a proposal to amend the 1970s-era Press Council Law. The amendments would restructure the Press Council to regulate new outlets and electronic media as it already does in the print sector.1 Civil society has expressed worries that the amendments would expand the government’s control over online media and online speech.2
Following the Easter Sunday attacks in April 2019, the government declared a state of emergency and passed emergency regulations.3 The regulations created a new competent authority appointed by the president.4 This authority could limit the publication of certain materials, including online materials, which included content deemed threatening to national security or disruptive to public order or the provision of essential services. The authority required that certain types of content be reviewed before being published. The regulations also prohibited the spread of false statements that could cause public disorder or alarm. Under the regulations, people could appeal decisions made by the competent authority to new advisory committees. The state of emergency was lifted in August 2019.5
Since the passage of the Right to Information Act in 2017,6 citizens have submitted thousands of RTI applications on issues ranging from legislation on the rights of people with disabilities to the blocking of websites (see B3).7
A culture of impunity, circumvention of the judicial process through arbitrary action, and a lack of adequate protection for individuals and their privacy compounded the poor enforcement of freedom-of-expression guarantees under former president Mahinda Rajapaksa’s government. These issues persisted into former president Sirisena’s government and continue under the current administration.8
- 1Press Council law to be amended to cover new media NewsWire January 6, 2021, http://www.newswire.lk/2021/01/06/press-council-law-to-be-amended-to-co…
- 2Amending Press Council Act: Government seeks opinions on amendments The Morning February 21, 2021 http://www.themorning.lk/amending-press-council-act-government-seeks-op…
- 3Sandun Jayawardana, “Emergency passed in Parliament,” Sunday Times, May 24, 2019, http://www.sundaytimes.lk/article/1089205/emergency-passed-in-parliament.
- 4Gehan Gunatilleke, “Explaining Sri Lanka’s New Emergency Regulations on ‘Publication’,” Groundviews, April 25, 2019, https://groundviews.org/2019/04/25/explaining-sri-lankas-new-emergency-…,“Understanding Emergency: Easter Sunday Attacks 2019,” CPA, https://www.cpalanka.org/wp-content/uploads/2019/04/QA_SoE.pdf.
- 5“Sri Lanka ends emergency rule imposed after Easter bombings,” Al Jazeera, August 23, 2019, https://www.aljazeera.com/news/2019/08/sri-lanka-ends-emergency-rule-im….
- 6RTI Commission of Sri Lanka, “Reflections on Sri Lanka’s RTI Act and RTI Regime,” February 2019, http://www.rticommission.lk/web/images/pdf/books/reflections-on-sri-lan….
- 7Chris Kamalendran, “Ashraff crash: not an explosion but maintenance negligence,” Sunday Times, March 4, 2018, http://www.sundaytimes.lk/180304/news/ashraff-crash-not-an-explosion-bu….
- 8A key instance of perceived impunity was the reprieve of Commander Admiral Wasantha Karannagoda from arrest, despite being a key suspect in the abduction and murder of 11 young men in 2008. Centre for Policy Alternatives, “The Need for Accountability in Sri Lanka’s Criminal Justice System: A Glance at Seven Emblematic Cases,” March, 2019, https://www.cpalanka.org/wp-content/uploads/2019/03/FINAL-A-Glance-at-S…; Manoj Colambage, “The Admiral and the case of 11 missing boys,” Sunday Observer, March 10, 2019, http://www.sundayobserver.lk/2019/03/10/opinion/admiral-and-case-11-mis…. Revisiting Ten Emblematic Cases in Sri Lanka: Why justice remains elusive Centre for Policy Alternatives January 2021 https://www.cpalanka.org/wp-content/uploads/2021/01/Revisiting-Ten-Embl…
|Are there laws that assign criminal penalties or civil liability for online activities, particularly those that are protected under international human rights standards?||1.001 4.004|
Several vaguely defined, overly broad laws can be abused to prosecute users and restrict online expression.
In June 2019, the cabinet approved vague amendments to the criminal and penal codes that criminalize the spread of “false news” affecting “communal harmony” or “state security.” These terms are left undefined in the amendments, leaving them open to abuse. If passed, an offense can be punished with a fine of more than one million rupees ($53,500), and a maximum prison sentence of five years.1 However, as of June 2021, the amendments have not been passed by Parliament. In April 2021, the government announced it was again considering penal-code amendments to criminalize false news, with news reports saying the government had approved concept papers in May 2021.2 The police recently cited a number of existing laws which could be used to arrest people for spreading misinformation, including sections of the penal code, the International Covenant on Civil and Political Rights (ICCPR) Act, the Computer Crime Act, the PTA, and sections of the Obscene Publications Act.3
The government has drafted a Cyber Security Act, which is expected to tackle cybercrime, the nonconsensual dissemination of intimate images, and hacking and intellectual property theft.4 A proposed draft of the bill was posted online in May 2019.5 The IT industry criticized the lack of transparency in the process and the broad definitions contained in the draft bill.6 Some civil society representatives also criticized the limited time for feedback and noted that Sinhala and Tamil translations were not available for consultations.7 Others pointed out that broad definitions for terms like “critical information infrastructure” and “cyber security incidents” could allow for the extension of government control over private institutions, could extend criminality to “actions that are otherwise acceptable but politically inconvenient,” and could have a chilling effect on privacy and freedom of expression.8 The final draft is not yet publicly available as of June 2021, though it was reported that the bill would be finalized by the end of the year.9
Publishing official secrets, information about Parliament that may undermine its work, or “malicious” content that incites violence or disharmony can result in criminal charges.10 Then government information director general Sudarshana Gunawardana stated in March 2018 that incitement to violence, including on social media, is contrary to Article 28 of the constitution and Section 100 of the penal code, as well as Section 3 of the ICCPR, to which Sri Lanka is a party.11
In February 2020, the foreign minister told the United Nations that the government would review and amend the PTA rather than pass the draft Counter Terrorism Act proposed by the previous government.12 The PTA has been previously used to crack down on critical online content, including speech from journalists.13 The government continues to use the PTA to detain writers, lawyers, and activists (see C3).
Authorities have increasingly manipulated the ICCPR Act, which enshrines the ICCPR in Sri Lankan domestic law, to criminalize online speech (see C3).14 Section 3(1), for example, prohibits national, racial, and religious hatred if it incites discrimination, hostility, and violence. Those charged under the act can only be granted bail by a high court.
- 1“Cabinet approval for tougher laws on fake news,” Daily FT, June 6, 2019, http://www.ft.lk/front-page/Cabinet-approval-for-tougher-laws-on-fake-n…, Rehab Mahamoor, “The Problem With Sri Lanka’s New ‘False News’ Law,” The Diplomat, August 7, 2019, https://thediplomat.com/2019/08/the-problem-with-sri-lankas-new-false-n….
- 2Fake news likely to be criminalized The Morning, April 5, 2021, https://www.themorning.lk/fake-news-likely-to-be-criminalised/
- 3No warrant needed for ‘fake news’ arrests The Morning June 9, 2021, https://www.themorning.lk/no-warrant-needed-for-fake-news-arrests/
- 4“SLCERT instructed to draft the Cyber Security Act,” NewsFirst, January 24, 2020, https://www.newsfirst.lk/2020/01/24/slcert-instructed-to-draft-the-cybe…
- 5“Cyber Security Bill,” Computer Emergency Readiness Team, https://www.cert.gov.lk/Downloads/Cyber_Security_Bill_2019-05-22_LD_Fin…
- 6“IT industry wants more say in Cyber Security Bill,” Daily FT, June 10, 2019, http://www.ft.lk/front-page/IT-industry-wants-more-say-in-Cyber-Securit…
- 7“‘සයිබර් ආරක්ෂණ පනත් කෙටුම්පත’ පිළිබද මහජන සංවාදයට ලබා දී ඇති කාලය ප්රමාණවත් නොවේ- අන්තර්ජාල මාධ්ය ක්රියාකාරිත්වය කියයි [There is not enough time given to the public discussion on the 'Cyber Security Bill' - Internet Media Activity],” Vikalpa, June 4, 2019, https://www.vikalpa.org/?p=35087
- 8“Lirneasia’s Response to Ministry of Digital Infrastructure and Information Technology and Sri Lanka CERT’s invitation for comments on Cyber Security Bill,” LirneAsia, June 5, 2019, https://lirneasia.net/wp-content/uploads/2019/06/LIRNEasia-comments-to-…
- 9Cybersecurity Bill by second half of 2021 The Morning April 11, 2021 https://www.themorning.lk/cybersecurity-bill-by-second-half-of-2021/
- 10Respective legislation: Official Secrets Act No. 32 of 1955; Parliament (Powers and Privileges) (Amendment) 1999; Prevention of Terrorism (Temporary Provisions) Act No. 48 of 1979.
- 11“Media cautioned against inciting hate speech,” Daily News, March 8, 2018, http://www.dailynews.lk/2018/03/08/local/144962/media-cautioned-against….
- 12“PTA will be reviewed – Dinesh,” EconomyNext, February 28, 2020, https://economynext.com/pta-will-be-reviewed-dinesh-54225/; “More tinkering with proposed Counter Terrorism Act?,” Sunday Observer, February 3, 2019, http://www.sundayobserver.lk/2019/02/03/news-features/more-tinkering-pr…; Shiran Illanperuma for Mass Movement for Social Justice, “The Counter Terrorism Act could crush organized workers,” Daily FT, February 22, 2019, http://www.ft.lk/opinion/The-Counter-Terrorism-Act-could-crush-organise…, “Policy and Legal Framework of the Proposed Counter Terrorism Act of Sri Lanka”, Sunday Times, October 16, 2016, http://www.sundaytimes.lk/161016/Cabinet%20Version%20-%20CT%20Poliyc%20….
- 13“Sri Lankan president pardons convicted Tamil editor”, BBC, May 3, 2010, http://news.bbc.co.uk/2/hi/south_asia/8657805.stm.
- 14“Misuse of ICCPR Act and Judicial System to Stifle Freedom of Expression in Sri Lanka,” Monitor, July 5, 2019, https://monitor.civicus.org/newsfeed/2019/07/05/iccpr-act-and-judicial-….
|Are individuals penalized for online activities, particularly those that are protected under international human rights standards?||3.003 6.006|
During the coverage period, a growing number of people were prosecuted in retaliation for their online activities, including criticism of the government.
Ramzy Razeek, a commentator who regularly used Facebook to discuss political and social topics such as ethnic harmony, the rights of marginalized communities, and gender,1 was detained on April 2020 over allegations that he violated the ICCPR Act and the Cyber Crimes Legislation after he called for a campaign against Muslim discrimination using “the pen and keyboard as weapons.” Before his arrest, Razeek had reportedly received online death threats due to the post and had announced that he would no longer post about politics or national issues out of concern for his children’s safety. He was granted bail and released from detention in September 2020.2
In January 2021, an activist and regular contributor to a news and opinions website was arrested under the ICCPR Act for a Facebook video in which he criticized a presidential statement and criticized monks using obscene language.3 In August 2019, author and poet Shakthika Sathkumara was released on bail, after being detained for four months under the ICCPR Act and the penal code for a short story he shared on Facebook relating to the Buddhist clergy.4 In December 2019, a petition was filed with the UN Working Group on Arbitrary Detention, arguing that Sathkumara’s prolonged detention and ongoing legal case violated the government’s commitments under the ICCPR Act and the Universal Declaration of Human Rights (UDHR).5 He was discharged in February 2021, days before the UN Human Rights Council was due to meet.6
Authorities summoned and questioned journalists and others working for online news outlets (see C7). In August 2020, LankaNewsWeb editor Desmond Chathuranga de Alwis was arrested under the Computer Crime Act and Article 111 of the constitution for publishing reports in contempt of court and the judicial process; his computer and mobile phones were also confiscated.7 He was granted bail in September 2020 but was ordered to report to the CID weekly and was barred from travelling overseas.8
In November 2020, a freelance journalist was arrested in secrecy in Batticaloa for posting photographs related to the LTTE; however, Reporters Without Borders received several reports that he had uploaded a note detailing events commemorating those who were killed during the country’s civil war.9
Individuals faced detention for commenting on politicians or government affairs online during the coverage period. In June 2021, an individual was arrested without a warrant under Section 120 of the penal code and Computer Crime Act for sharing satirical posts about several politicians, including one accusing two state officials of bribing a Muslim to break two Buddhist statues.10 The same day, the head of the Information Technology Society of Sri Lanka (ITSSL), Rajeev Yasiru Kuruwitage Mathew, was arrested without a warrant under the Computer Crime Act for spreading false information about a cyberattack on several government websites. He was remanded for two days before being released on bail.11
In May 2021, a Kotmale state officer was arrested for spreading false photographs related to deforestation; the CID said the officers’ photographs actually showed a private land clearing.12 In June 2021, a Galle resident was arrested over a “defamatory” Facebook post referring to the sinking of a vessel and subsequent pollution but was bailed the same day.13
Many young Tamils are being detained over their social media posts.14 In March 2021, the Terrorism Investigations Department (TID) arrested two people in Jaffna for running a website and YouTube channel that allegedly promoted Liberation Tigers of Tamil Eelam (LTTE) propaganda. The TID also confiscated computers and other equipment belonging to the individuals.15 In February 2021, a Tamil youth was arrested by the TID under the PTA for TikTok posts featuring the LTTE.
Individuals also faced detention for posts related to the Easter Sunday attacks as well as religious content. In April 2021, a 19-year-old from Gampola was arrested under the ICCPR, Section 120 of the penal code, and Section 98 of the Police Ordinance for spreading false news with the objective of creating racial disharmony. He had allegedly posted that the country should “get ready for another easter attack,” referencing the 2019 Easter Sunday bombings, in response to the government banning the burqa.16 That same month, the TID arrested two individuals for spreading Wahhabism and extremism via social media. The two had helped publish videos and photographs connected to the Easter Sunday attacks and used a WhatsApp group in Qatar to spread extremist ideology.17 In October 2020, a woman was arrested over a video she uploaded to Facebook which the CID said promoted hate between Buddhists and Catholics, specifically against the archbishop of Colombo.18
Several people were arrested for online speech amid the COVID-19 pandemic. During March and April 2020, at least 17 people were arrested for allegedly spreading misinformation about the virus, including across social media.19 Police visited the home of one student activist after he questioned the government in a Facebook comment.20 In November 2020, one person was arrested for uploading posts that alleged people were dying from COVID-19 in the streets. The police said four more had been identified making similar posts and would be arrested, though there were no further updates on these cases.21
- 1“Repression of Dissent in Sri Lanka: Before and during COVID19 curfew,” Inform Sri Lanka, May 30, 2020, https://www.inform.lk/repression-of-dissent-before-during-covid19-sl/
- 2“Ramzy Razeek released on bail after 5 months of Sri Lankan detention,” Tamil Guardian, September 18, 2020, https://www.tamilguardian.com/content/ramzy-razeek-released-bail-after-…
- 3Freedom of Expression: Where do we stand? Groundviews, May 3, 2021, https://groundviews.org/2021/05/03/freedom-of-expression-where-do-we-st…
- 4“Sri Lanka: Drop investigation into award-winning writer Shakthika Sathkumara,” Pen International, September 6, 2019, https://www.englishpen.org/campaigns/sri-lanka-drop-investigation-into-…
- 5“UN human rights petition filed for author Shakthika Sathkumara,” Daily FT, December 11, 2019, http://www.ft.lk/news/UN-human-rights-petition-filed-for-author-Shakthi…
- 6Shakthika Sathkumara discharged days ahead of UNHRC sessions EconomyNext February 9, 2021 https://economynext.com/shakthika-sathkumara-discharged-days-ahead-of-u…
- 7Web journalist Desmond Chathuranga De Alwis arrested NewsFirst August 31, 2020 https://www.newsfirst.lk/2020/08/31/web-journalist-desmond-chathuranga-… and Repression of Dissent in Sri Lanka Inform 1st-31st August 2020 https://www.inform.lk/wp-content/uploads/2020/10/RoD_Aug2020.pdf
- 8Web journalist Desmond de Alwis granted bail NewsFirst September 30, 2020, https://www.newsfirst.lk/2020/09/30/web-journalist-desmond-de-alwis-gra…
- 9“Sri Lanka: tamil reporter held on absurd terrorism charge,” Reporters Without Borders, January 13, 2021, https://rsf.org/en/news/sri-lanka-tamil-reporter-held-absurd-terrorism-…
- 10No warrant needed for ‘fake news arrests’ The Morning June 9, 2021, https://www.themorning.lk/no-warrant-needed-for-fake-news-arrests/
- 11ITSSL Chairman released on bail NewsRadio June 9, 2021, https://www.newsradio.lk/justin/itssl-chairman-released-on-bail/
- 12State official arrested for spreading fake news on social media NewsWire May 22, 2021 http://www.dailymirror.lk/breaking_news/State-official-arrested-for-spr…
- 13Tharaka Nanayakkara, Twitter June 18, 2021, https://twitter.com/TharakaNana7/status/1405709757202063361
- 14Tamil journalist arrested by Sri Lanka’s Terrorism Investigation Division Tamil Guardian 29 November 2020 https://www.tamilguardian.com/content/tamil-journalist-arrested-sri-lan…
- 15Two arrested in Jaffna over website and YouTube channel promoting LTTE AdaDerana March 29, 2021 http://www.adaderana.lk/news/72662/two-arrested-in-jaffna-over-website-…
- 16One arrested for spreading fake news The Morning April 29, 2021 https://www.themorning.lk/one-arrested-for-spreading-fake-news/, @SalindaSam, Twitter April 28, 2021 https://mobile.twitter.com/SalindaSam/status/1387369636132319234 and @judemelaka Twitter, April 27, 2021 https://mobile.twitter.com/judemelaka/status/1387048129770315790
- 17Two arrested for spreading Wahhabism on social media Daily Mirror 2 April 2021 http://www.dailymirror.lk/breaking_news/Two-arrested-for-spreading-Waha…
- 18CID arrests woman for posting inter-religious hate video on FB ColomboPage October 18, 2020, http://www.colombopage.com/archive_20B/Oct18_1603043239CH.php
- 19“16 arrested for fake news: ‘No action against government supporters’ says JVP,” NewsWire, April 13, 2020, http://www.newswire.lk/2020/04/13/16-arrested-for-fake-news-no-action-a…, “Woman arrested for spreading fake news,” Colombo Gazette, April 17, 2020, https://colombogazette.com/2020/04/17/woman-arrested-for-spreading-fake…
- 20“Repression of Dissent in Sri Lanka: Before and during COVID19 curfew,” Inform Sri Lanka, May 30, 2020, https://www.inform.lk/repression-of-dissent-before-during-covid19-sl/
- 21Suspect arrested over fake news on COVID-19 deaths: DIG Ajith Rohana NewsFirst November 14, 2020, https://www.newsfirst.lk/2020/11/14/suspect-arrested-over-fake-news-on-…
|Does the government place restrictions on anonymous communication or encryption?||2.002 4.004|
Users can freely use encryption tools, though there are some limits to anonymous digital communication. Legal-name registration is required for mobile phone users under a 2008 Defense Ministry program to curb “negative incidents.” The program was bolstered in 2010 after service providers failed to ensure that subscribers registered.1 In October 2020, the TRCSL required all mobile phones to be registered with them; they announced that SIM cards on newly purchased unregistered phones would not be activated after a certain date. The TRCSL allegedly instituted this requirement to stop refurbished mobile devices from flooding the market.2 Access to public Wi-Fi hotspots requires a citizen’s national identity card number,3 which could be used to track online activity.
Service providers restrict or limit user access to security tools or certain applications. In May 2021, Swiss cybersecurity and internet privacy provider GlobeX Data signed a distribution agreement with Dialog Axiata for secure email, voice, text, and video services.4 In April 2021, SLT introduced unlimited data packages. Most Sri Lankan broadband connections are throttled after a set amount of data is consumed, and customers have long called for ISPs to offer unlimited packages. However, all but two SLT plans blocked VPNs, torrents, P2P applications, and Telegram as part of their terms and conditions.5 Dialog also announced it would be offering unlimited data plans, which also restrict the speed of the Telegram app.6
News sites are required to register under a procedure that lacks a legal foundation, according to critics (see B6). The registration form issued by the Mass Media Ministry requires owners, administrators, and editors to enter their personal details, including addresses, along with the domain name, and internet protocol (IP) address of the website, with applications reviewed by a panel appointed by the ministry secretary.7 The form does not refer to a law or indicate the penalty for noncompliance. Civil society groups fear the requirement could be used to hold registered site owners responsible for content posted by users or to prevent government critics from writing anonymously.8
- 1Bandula Sirimanna, “Sri Lanka to tighten mobile phone regulations,” Sunday Times, October 31, 2010, http://www.sundaytimes.lk/101031/BusinessTimes/bt32.html.
- 2Only purchase TRCSL approved mobile phones; Number portability service to be available soon NewsFirst 1 October 2020 https://www.newsfirst.lk/2020/10/01/only-purchase-trcsl-approved-mobile…
- 3“Sri Lanka to have 500 public Wi-Fi spots before end 2016,” LBO, October 31, 2016, http://www.lankabusinessonline.com/sri-lanka-to-have-500-public-wi-fi-s….
- 4GlobeX Data signs distribution agreement with Sri Lanka’s Dialog Axiata Group – part of Axiata group – South Asia’s largest telecom operator – for its Swiss hosted ‘Sekur’ secure email and secure messaging application Yahoo Finance May 13, 2021 https://finance.yahoo.com/news/globex-data-signs-distribution-agreement…
- 5Sri Lanka Telecom Broadband packages https://www.slt.lk/en/broadband/packages (accessed on May 26, 2021)
- 6Dialog Broadband packages https://www.dialog.lk/mobile-broadband-postpaid-packages (accessed May 26, 2021)
- 7Application for Registration of Websites Ministry of Mass Media and Information https://www.media.gov.lk/images/pdf_word/2021/web_application_new_2021… and“Preocedure of Registration Websites,” Ministry of Mass Media and Information, https://www.media.gov.lk/images/pdf_word/2018/procedure-of-registration…
- 8“Arbitrary Blocking and Registration of Websites: The Continuing Violation of Freedom of Expression on the Internet,” Centre for Policy Alternatives, November 9, 2011, https://www.cpalanka.org/wp-content/uploads/2011/11/FINAL-FOE-STATEMENT…
|Does state surveillance of internet activities infringe on users’ right to privacy?||2.002 6.006|
State surveillance of online activities undermines users’ right to privacy. The National Action Plan for the Protection and Promotion of Human Rights 2017–21 contains the objective of ensuring the constitutional recognition of the right to privacy, but in practice, this right is frequently not respected.1 In March 2021, an anonymous Twitter user wrote that the Defense Ministry had activated the Pegasus spyware suite with the cooperation of Dialog Axiata and Mobitel. An opposition parliamentarian also stated that the government had obtained Pegasus. Dialog, however, claimed the allegations were false.2
In May 2021, the Health Ministry and the ICTA announced the launch of a digital vaccination ID, which would allow people to schedule COVID-19 vaccination and appointments and receive internationally valid vaccination certificates. The sign-up process, which is not live as of June 2021, appears to ask for health data to receive appointments and digital IDs.3 In February 2021, the State Ministry of Primary Healthcare, Epidemics, and COVID Disease Control launched a website for individuals to register for the COVID-19 vaccination program.4 The website collected personal details including names, addresses, mobile numbers, and email addresses as well as health data. The data privacy statement did not detail how collected data would be used. An estimated 50,000 people registered on the site as of February 2021; the site was subsequently taken down.
The use of mobile apps and tracking tools amid COVID-19 raised privacy concerns (see C6).5 A government-developed app, Rakemu Api, allows users to report their health status if they have come into contact with a COVID-19 patient or returned from overseas in the past two weeks. There was a lack of transparency about who has access to collected data, how data can be used, how information is stored, and how long information is stored.6 The ICTA-developed Stay Safe app also traces those who have tested positive for COVID-19 and close associates. Several restaurants and hotels now offer the option of logging into Stay Safe for contact-tracing purposes.7 In an April 2020 interview, the defense minister disclosed that military intelligence was receiving mobile-phone contacts of patients from service providers. He called the information an important national security tool, as it was used to track the contacts of patients as well as those who did not comply with quarantine.8
Registration for a media briefing for social media users by the government-led National Development Media Centre required details like NIC numbers, even for users attending the briefings online.9
Following the Easter Sunday attacks, the government indicated its intention to ramp up monitoring and surveillance. During the coverage period, while speaking about the arrest of individuals for posts which allegedly referenced or promoted the LTTE propaganda (see C3), a government official said that the CID and TID deploy teams that monitor the internet and social media platforms.10 In May 2019, the then prime minister announced a plan to implement a Centralized and Integrated Population Information System (CIPIS) to track individuals engaged in terrorism, money laundering, and financial crimes.11 In August 2019, police announced that they were creating an integrated database and facial recognition system to “identify criminals” with SLT and other parties.12
In March 2021, it was announced that the Environmental Ministry had established a special unit of 323 officers to monitor posts on social media related to environmental destruction.13
During a visit to China in May 2019, then president Sirisena asked Chinese president Xi Jinping to share surveillance technology with Sri Lanka, citing the challenges of surveilling encrypted platforms. President Xi reportedly agreed to meet Sirisena’s request.14 There has been no update on the practical outcome of this meeting.
The introduction of the electronic identity card (e-NIC) project has also raised surveillance concerns. The project includes a central database storing wide-ranging information and biometrics with “family tree” data.15 Activists warn that this data could be used to target political opponents and is vulnerable to hacking.16 President Rajapaksa has asked that the project be expedited.17 There was little opposition to the project when it was first introduced, presumably because the government justified it as a needed improvement to government service-delivery operations.
Extrajudicial surveillance of personal communications is prohibited under the Telecommunications Act. However, communications can be intercepted on the order of a minister or a court, or in connection with a criminal investigation.
State agencies reportedly possess some technologies that could facilitate surveillance. In March 2019, then president Sirisena requested approval for the government to purchase 7.11 trillion rupees ($38.9 million) worth of surveillance technology from an unnamed Israeli company. Bypassing the normal procedures for purchasing such technology, Sirisena claimed the request—which was purportedly related to tackling drug trafficking—was urgent and must be kept secret.18
In 2015, leaked documents indicated that Milan-based HackingTeam was approached by several state security agencies seeking to acquire the company’s digital surveillance technologies.19 The leaks revealed that in 2014, the Defense Ministry was planning to develop an electronic surveillance and tracking system with the help of a local university.20 While no equipment purchases were confirmed in the leaked documents, the papers did include a 2013 email exchange between a HackingTeam employee and an individual claiming to represent Sri Lankan intelligence agencies, which described confidential acquisitions of “interception technologies” the individual had previously brokered.21 Digital activists in Sri Lanka believe that Chinese companies ZTE and Huawei, which collaborated with Mahinda Rajapaksa’s government in the development and maintenance of the Sri Lankan ICT infrastructure, may have inserted backdoor espionage and surveillance capabilities into the technology.22
- 1The National Action Plan for the Protection and Promotion of Human Rights (2017-2021), Ministry of Foreign Relations
- 2Siwura, Twitter https://twitter.com/siwura/status/1375306742871982081 (accessed 27 May 2021), Newshub.lk, Twitter https://mobile.twitter.com/Newshub_lk/status/1375429313365876738 (accessed 27 May 2021) and Siwura, Twitter https://twitter.com/siwura/status/1375801606717890571 (accessed 27 May 2021)
- 3Digital vaccination ID pilot project launched Newswire May 20, 2021 https://www.newswire.lk/2021/05/20/digital-vaccination-id-pilot-project… and Thyagi Ruwanpathirana Twitter https://twitter.com/ThyagiR/status/1397040305912782849 (site accessed 12 June 2021)
- 4Website launched for COVID vaccine registration Daily FT February 11, 2021, http://www.ft.lk/front-page/Website-launched-for-COVID-vaccine-registra…
- 5Groundviews (@Groundviews), “Plans by @icta_srilanla twiiter.com…,” Twitter Post, March 14, 2020, https://twitter.com/groundviews/status/1238676202530803716
- 6“Southasiasphere Issue #2,” Himal Southasian April 3, 2020, https://www.himalmag.com/southasiasphere-issue-2/
- 7‘Stay safe’ digital programme designed to contain COVID-19 introduced to President Official website for Sri Lanka’s response to COVID-19 November 5, 2020 https://covid19.gov.lk/news/general/stay-safe-digital-programme-designe…
- 8“Prompt interventions by military helped reduce coronavirus impact in Sri Lanka - Defence Secretary,” Defence.lk, April 17, 2020, http://www.defence.lk/Article/view_article/1243
- 9Media Center for National Development, Twitter posts, https://twitter.com/MCND_LKA/status/1368128452486787074 and https://twitter.com/MCND_LKA/status/1368128454906974211
- 10Sri Lanka arrests Tamil youth for TikTok posts after ‘cyber patrol unit’ monitoring Tamil Guardian 26 February 2021 https://www.tamilguardian.com/content/sri-lanka-arrests-tamil-youth-tik…
- 11Imesh Ranasinghe, “Government to install people-tracker database,” RepublicNext, May 8, 2019, https://www.republicnext.com/security/government-to-install-people-trac….
- 12“Police to introduce database, facial recognition systems to identify criminals,” Sunday Times, August 29, 2019, http://www.sundaytimes.lk/article/1100543/police-to-introduce-database-…
- 13323 officers to be recruited to monitor environmental destruction posts on social media Newswire March 29, 2021 https://www.newswire.lk/2021/03/29/323-officers-to-be-recruited-to-moni…
- 14Manjula Fernando, “China to share social media surveillance technology with Sri Lanka,” Sunday Observer, May 26, 2019, http://www.sundayobserver.lk/2019/05/26/news-features/china-share-socia…; Santhush Fernando, “China-styled mass online surveillance,” The Sunday Morning, May 19, 2019, http://www.themorning.lk/china-styled-mass-online-surveillance/
- 15D.A. Jayamanne, “We need to talk about that e-NIC project,” Groundviews, August 31, 2017, https://groundviews.org/2017/09/01/we-need-to-talk-about-that-e-nic-pro….
- 16Amra Ismail, “e-NIC project to come into operation amidst concerns,” Daily Mirror, November 13, 2017, http://www.dailymirror.lk/article/e-NIC-project-to-come-into-operation-….
- 17“Emergency NIC service launched,” Daily News, May 13, 2020, https://www.dailynews.lk/2020/05/13/local/218464/emergency-nic-service-…
- 18“Sri Lankan Govt to spend 6.9 billion rupees for Interception Equipment in the name of the ‘war on drugs’,” Colombo Telegraph, March 21, 2019, https://www.colombotelegraph.com/index.php/sri-lankan-govt-to-spend-6-9….
- 19Hacking the hackers: Surveillance in Sri Lanka revealed”, Groundviews, July 15, 2015, http://groundviews.org/2015/07/15/hacking-the-hackers-surveillance-in-s….
- 20“RE: [BULK] INDICATIVE PRICE,” Hacking Team Archives, WikiLeaks, March 15, 2014, https://wikileaks.org/hackingteam/emails/emailid/238000.
- 21“Re: FW: Sri Lanka Prospects & Exclusive Representation,” Hacking Team Archives, WikiLeaks, March 15, 2014, https://wikileaks.org/hackingteam/emails/emailid/577225.
- 22ZTE Corporation signed an agreement with Mobitel to develop its 4G LTE network and carried out successful trials in 2011, while SLT’s ADSL infrastructure is supported by Huawei. “Sri Lanka’s Mobitel and ZTE Corporation Carry Out the First Successful 4G(LTE) Trial in South Asia,” ZTE, May 17, 2011, https://www.zte.com.cn/global/about/news/351110, “SLT Tie Up With Huawei to Expand Broadband Internet Coverage,” The Island, https://web.archive.org/web/20190216162711/https://island.lk/2006/09/29…, “Are Chinese Telecoms acting as the ears for the Sri Lankan government?,” Groundviews, February 16, 2012, http://groundviews.org/2012/02/16/are-chinese-telecoms-acting-as-the-ea….
|Does monitoring and collection of user data by service providers and other technology companies infringe on users’ right to privacy?||3.003 6.006|
There are some legal requirements for telecommunications companies to aid the government in monitoring users, and companies have reportedly provided data to authorities. A draft of a data protection law was completed in September 2019, although a final draft is not yet public.1 Some feedback on the initial draft noted that it was modeled on the European Union General Data Protection Regulation (GDPR).2 A series of discussions on the bill led by the ICTA was held in June 2021.3
Amid COVID-19, the country has integrated its defense apparatus into its pandemic response. Military intelligence agencies have obtained personal data from mobile service providers to identify people who have interacted with patients or evaded quarantines (see C5).4 In May 2021, a Google form circulated on WhatsApp purported to collect data on those living in Dehiwala and Ratmalana who had not received a vaccine. However, the Dehiwala Municipal Council later confirmed that the form was not initiated by them and threatened to take legal action against those who continued to circulate it.5
In 2013, Dialog chief executive Hans Wijesuriya denied the existence of a comprehensive surveillance apparatus in Sri Lanka but agreed that telecommunications companies “have to be compliant with requests from the government.”6 In 2016, however, SLT engineers apparently defied orders from their superiors to install equipment purchased for surveillance.7 The nature and number of government requests for data is unknown, since there is no legal provision that requires officials to notify targets. Some companies disclose information; from July to December 2020, Facebook received 55 such requests; 44 of them legal-process related and 11 of them emergency disclosure requests. Facebook did not provide data in response to any of the requests.8 Twitter reported one request from the government for user data during the January–June 2020 period.9
- 1“Data protection law finalized,” Daily News, September 28, 2019, https://www.dailynews.lk/2019/09/28/local/198268/data-protection-law-dr…
- 2“Comments on the draft framework for a proposed data protection bill in Sri Lanka,” LirneAsia, July 1, 2019, https://lirneasia.net/2019/07/comments-on-the-framework-for-a-proposed-…
- 3ICTA Sri Lanka, Twitter https://twitter.com/icta_srilanka/status/1399020334624481282 (accessed on June 5, 2021)
- 4“Prompt interventions by military helped reduce coronavirus impact in Sri Lanka - Defence Secretary,” Defence.lk, April 17, 2020, http://www.defence.lk/Article/view_article/1243
- 5Kris Balthazaar, Facebook https://www.facebook.com/kris.balthazaar/posts/10157656383731097 (accessed May 27, 2021)
- 6“Dialog CEO Hans Wijesuriya: “No surveillance program in Sri Lanka, but telecoms have to comply,” The Republic Square, September 28, 2013, http://www.therepublicsquare.org/politics/2013/09/dialog-ceo-hans-wijes…
- 7Namini Wjedasa, “Former govt bought hi-tech tapping devices, but engineers defied orders,” Sunday Times, August 7, 2016, http://www.sundaytimes.lk/160807/news/former-govt-bought-hi-tech-tappin….
- 8“Government Requests for User Data,” Facebook Transparency Report, https://transparency.facebook.com/government-data-requests/country/LK/j…
- 9Twitter transparency report, “Information request: Sri Lanka,” https://transparency.twitter.com/en/reports/countries/lk.html
- 10“SLT announces grand opening of state of the art Tier 3 data centre in Sri Lanka,” SLT, January 17, 2018, http://www.slt.lk/en/content/slt-announces-grand-opening-state-art-tier….
- 11Mahesh De Andrado, “SLT’s Tier 3 Data Centre is Almost Ready,” ReadMe, December 5, 2017, https://www.readme.lk/slt-data-center-tier-three/.
|Are individuals subject to extralegal intimidation or physical violence by state authorities or any other actor in relation to their online activities?||3.003 5.005|
More cases of intimidation against both journalists and ordinary users were reported during the coverage period.
In March 2021, opposition parliament members claimed that web journalist Sujeewa Gamage, a contributor to the Siyarata news site, was abducted and tortured for information on sources and political contacts. A police spokesman later said the journalist had made false claims of being abducted, adding that the Colombo Crimes Division would be questioning him and the two opposition members.1
Journalists are frequently the targets of assault, intimidation, and harassment. In April 2021, freelance photographer and activist Malika Abeykoon was arrested after covering a protest of health-care workers. He said he was beaten by a police officer while in detention.2 In October 2020, two Tamil Guardian correspondents, Kanapathipallai Kumanan and Shanmugam Thavaseelan, were assaulted while investigating an alleged timber trafficking operation in Mullaitivu. The journalists’ attackers deleted most of the documentation of the deforestation and removed the journalists’ memory cards. The attackers also stole their money and jewelry and filmed the journalists on their mobile phones while accusing them of trespassing.3 In August 2020, Vijayanathan Janarthan, a media correspondent at Tamil newspaper and website Valampuri, was intercepted by two masked men on a motorcycle and attacked using barbed wire.4 Journalists with online news sites theleader.lk and VoiceTube were also summoned and questioned at length by the CID (see C3).
In January 2020, a group of Tamil journalists in Batticaloa, some of whom worked for online outlets such as Lankasri, received death threats and accusations that they had received money from LTTE members living abroad.5 In December 2019, the former head of the state-run Associated Newspapers of Ceylon’s new media division, which manages the outlet’s online and social media presence, was assaulted by a group of individuals with ties to the ruling political party.6 Groups of men had also attacked journalists from the Daily Mirror/Lankadeepa and Resa newspapers, although it is unclear whether the attack was linked to online activity.7 In November 2019, police raided the office of news site newshub.lk using a search warrant that had expired 11 months prior. The police searched computers, servers, and laptops, reportedly seeking material that mentioned “gota,” a seeming reference to President Gotabaya Rajapaksa.8 In May 2019, Kanapathipillai Kumanan, a freelance correspondent with the Tamil Guardian news site and the Virakesari newspaper, was assaulted by a police officer.9
Intimidation and harassment also increased around the COVID-19 pandemic. In June 2021, the CID was reportedly forming a team to act against the spread of misinformation on COVID-19 and other “sensitive” issues and take action against those who create and share purportedly false information.10 The Free Media Movement expressed concerns that the government was detaining users who posted pandemic-related social media comments, and noted that the government targeted users living in the north and east of the country.11 Police visited the home of a student activist after he criticized the government on Facebook (see C3).12 Separately, when social media users called to boycott Muslim businesses and spread allegations that Muslims were spreading COVID-19, they were not refuted by the government. Senior government officials also implied that the virus was rife among the Muslim community, drawing condemnation from civil society.13
Families of journalists have been targets of online harassment. In June 2018, Sandya Eknaligoda, wife of disappeared journalist Prageeth Eknaligoda, filed a complaint with the CID about a slew of social media posts containing hateful content about her and her family.14
Women have been subjected to misogynistic and intrusive posts on social media, especially on Facebook. For example, intimate images have been shared in Facebook groups without the subjects’ consent, often with abusive or derogatory captions.15 In the past year, there have been 400 cases of blackmail for money or sexual favors, sale of intimate videos to pornography websites, the leaking of intimate videos by former partners, sharing of obscene photos and videos, and the posting of edited photographs on social media.16
Female activists, lawyers and politicians have also endured threats and intimidation online that have affected their work.17 A female lawyer who appeared on behalf of the families in an enforced disappearances case was threatened with violence and sexualized abuse on social media.18 During the August 2020 elections, women candidates were also subject to sexualized abuse online.19 Two Tamil women who were planning to contest the elections were aggressively attacked online.20 Members of the LGBT+ community were also the target of hate speech and were “outed” online.
- 1False claims by web journalist: Rajitha, son under CCD probe Daily News March 19, 2021 http://www.dailynews.lk/2021/03/19/local/244439/false-claims-web-journa…
- 2Prasad Welikumbura, Twitter https://twitter.com/Welikumbura/status/1383485998747701251 (accessed 27 May 2021) and “Freedom of Expression: Where do we stand?” Groundviews, May 3, 2021, https://groundviews.org/2021/05/03/freedom-of-expression-where-do-we-st…
- 3October - a bleak month for freedom of expression in Sri Lanka Global Voices November 6, 2020 https://advox.globalvoices.org/2020/11/06/october-a-bleak-month-for-fre…
- 4Repression of dissent in Sri Lanka Inform 1-31 August 2020 https://www.inform.lk/wp-content/uploads/2020/10/RoD_Aug2020.pdf
- 5“Batticaloa Tamil journalists receive death threats,” Colombo Gazette, January 24, 2020, http://colombogazette.com/2020/01/24/batticaloa-tamil-journalists-recei…
- 6“Attacks on human rights organisations, media organisations and journalists in Sri Lanka,” Amnesty International, January 16, 2020, https://www.amnesty.org/download/Documents/ASA3716782020ENGLISH.pdf
- 7“Journalists beaten by unidentified groups, interrogated by police in Sri Lanka,” Committee to Protect Journalists, December 16, 2019, https://cpj.org/2019/12/journalists-beaten-by-unidentified-groups-inter…
- 8“Police search Newshub.lk newsroom,” EconomyNext, November 26, 2019,https://economynext.com/police-search-newshub-lk-newsroom-47166/
- 9“Alarming resurgence in Sri Lankan police attacks on Tamil journalists,” RSF, June 4, 2019, https://rsf.org/en/news/alarming-resurgence-sri-lankan-police-attacks-t….
- 10Special CID team to take action against fake news on social media Ada Derana June 7, 2021, http://www.adaderana.lk/news/74466/special-cid-team-to-take-action-agai…
- 11Concern over detention of individuals for social media comments about the pandemic IFEX 6 January 2021 https://ifex.org/sri-lanka-concern-over-detention-of-individuals-for-so…
- 12“Repression of dissent in Sri Lanka: Before and during COVID-19 curfew,” Inform Sri Lanka, May 30, 2020, https://www.inform.lk/repression-of-dissent-before-during-covid19-sl/
- 13Meenakshi Ganguly, “Sri Lankan officials stoke COVID-19 communal hate,” Human Rights Watch, May 19, 2020, https://www.hrw.org/news/2020/05/19/sri-lankan-officials-stoke-covid-19…
- 14Opinions, b*tch: Technology Based Violence Against Women in Sri Lanka Groundviews, Hashtag Generation and Ghosha June 27, 2019 https://groundviews.org/2019/06/27/opinions-btch-technology-based-viole…
- 15“Technology-related violence against Women and Girls: Key Trends,” Groundviews, January 15, 2018, https://groundviews.org/2018/01/15/technology-related-violence-against-….
- 16Sri Lanka ‘groping in the dark’ about how to deal with cyber bullies The Sunday Times March 7, 2021, http://www.sundaytimes.lk/210307/news/sri-lanka-groping-in-the-dark-on-…
- 17“Invisible Barriers: The Struggle to Combat Violence, Online and Off,” Groundviews, May 29, 2018, http://groundviews.org/2018/05/29/invisible-barriers-the-struggle-to-co…; Amalini de Sayrah, Raisa Wickrematunge, “An Uneven Playing Field,” Groundviews, May 4, 2018, https://groundviews.org/2018/05/04/an-uneven-playing-field-harassment-o….
- 18Sri Lanka: Government suffocating dissent and obstructing justice for historic crimes, says Amnesty report Amnesty International 17 February 2021 https://www.amnesty.org/en/latest/news/2021/02/sri-lanka-government-suf…
- 19Tighter laws sought to curb online harassment of women politicians Daily News February 27, 2021 http://www.dailynews.lk/2021/02/27/local/242689/tighter-laws-sought-cur…
- 20“Repression of dissent in Sri Lanka: Before and during COVID-19 curfew,” Inform Sri Lanka, May 30, 2020, https://www.inform.lk/repression-of-dissent-before-during-covid19-sl/
|Are websites, governmental and private entities, service providers, or individual users subject to widespread hacking and other forms of cyberattack?||1.001 3.003|
Score Change: The score declined from 2 to 1 due to the cyberattacks directed at online news outlets and multiple cases of government websites, including the prime minister’s website, being hacked.
Government and business websites are vulnerable to hacking and other cyberattacks. While the problem is not historically widespread in Sri Lanka, notable attacks on government websites and other websites were recorded during the coverage period. Cyberattacks occasionally targeted government critics, such as the TamilNet news site, under former president Mahinda Rajapaksa.1
In April 2021, the Colombo Gazette’s news site was subject to a DDoS attack. The motivations of the attack were unclear. The editor speculated that the site was targeted by China because the botnet which launched the attack appeared to have originated from China and Hong Kong. However, because the attackers used CloudFlare technology, a subsequent IP trace was redirected to the closest CloudFlare server, which was in China; other experts, therefore, did not support the claim that China launched the attack.2
In February 2021, shortly after Independence Day, some users accessing Google.lk were redirected to another site which highlighted minority rights issues. The TRCSL called the incident a “malicious redirection” and said it was working with the Sri Lankan domain registry to resolve the issue.3 It was later revealed that the domain registry’s usernames and passwords had been leaked on the dark web, and that the credentials had been used on multiple sites since 2012, opening up the potential for future attacks.4 The registry reported that several government agency websites were being redirected.5 In a notice on its site, the registry acknowledged security shortcomings and noted they had since updated their systems to remove vulnerabilities.6
In May 2021, recognized as the anniversary of the end of the civil war, several websites were hacked by the Tamil Eelam Cyber Force. The Health Ministry, Energy Ministry, the Sri Lankan embassy in China, and the Rajarata University websites were affected. 7 The prime minister’s website was hacked in June 2021, with the website redirecting to a site dedicated to the cryptocurrency Bitcoin. 8
In June 2020, several journalists’ WhatsApp accounts were targeted by SIM-swapping attacks, which occur when a hacker convinces a service provider to switch a phone number to a new device that is under their control.9 This allows the hacker to access the targeted person’s two-factor authentication. Those affected included members of the Groundviews WhatsApp group, which was subsequently shut down, and potentially other journalist WhatsApp groups. In May 2021, the TRCSL issued a notice that SIM-swapping attacks continued to occur on WhatsApp.10
The draft Cyber Security Act, which would establish a Cyber Security Agency and implement the National Cyber Security Strategy of Sri Lanka, is expected to include provisions for protection against hacking (see C2). 11
Hackers frequently attack government and business websites, and in 2016 one technology company placed Sri Lanka among the top 10 countries in the Asia-Pacific region facing increased threats to cybersecurity.12 In May 2019, several local websites, such as that of the Kuwaiti embassy in Colombo, were defaced by unknown hackers.13
- 1“Sri Lanka,” Reporters without Borders, updated on January 20, 2016, https://rsf.org/en/news/sri-lanka-3.
- 2Sri Lanka website Colombo Gazette website crashes after alleged Chinese bot attack EconomyNext April 28, 2021 https://economynext.com/sri-lanka-website-colombo-gazette-crashes-after… and Easwaran Rutnam, Twitter https://twitter.com/easwaranrutnam/status/1387190170105958404 (accessed 27 May 2021) and Asela Waidyalankara Twitter https://twitter.com/aselawaid/status/1387338625549959169 (accessed 27 May 2021)
- 3Several lk domains are currently being affected by malicious redirection NewsWire February 6, 2021, http://www.newswire.lk/2021/02/06/google-lk-hme-users-in-sri-lanka/ and Telecommunications Regulatory Commission, Twitter (accessed on February 6, 2021) https://twitter.com/TRCSL/status/1357914298610143232
- 4Sri Lanka Domain Attacks: Exposed Credentials available in Dark Web for 8 years! Cyber Security Works February 11, 2021 https://cybersecurityworks.com/blog/cyber-risk/sri-lankan-domain-attack…
- 5Majority of Govt websites targeted in LK domain hack NewsFirst 6 February 2021 https://www.newsfirst.lk/2021/02/06/sri-lankan-domains-affected-by-a-ma…
- 6LK Domain Registry, 24 February 2021 https://www.nic.lk/
- 7Sri Lanka Tweet Twitter https://twitter.com/SriLankaTweet/status/1394524760986382338 and https://twitter.com/SriLankaTweet/status/1394504169239695367 (both accessed May 27, 2021)
- 8Prime Minister’s official website hacked Newswire June 3, 2021, https://www.newswire.lk/2021/06/03/prime-ministers-official-website-hac…
- 9WhatsApp & Groundviews: The end of updates,” Groundviews, June 15, 2020, https://groundviews.org/2020/06/15/whatsapp-groundviews-the-end-of-upda…
- 10TRCSL, Twitter https://twitter.com/TRCSL/status/1393499749009948673 (accessed on 27 May 2021)
- 11Disna Mudalige, “New Cyber Security Bill Ready,” Daily News, May 29, 2019, http://www.dailynews.lk/2019/05/29/local/186891/new-cyber-security-draf…; Aryan Babele, “Lowdown: Sri Lanka’s Cybersecurity Bill provides for cybsersecurity agency, penalties, and more,” Medianama, May 31, 2019, https://www.medianama.com/2019/05/223-lowdown-sri-lankas-cyber-security….
- 12Nisthar Cassim, “Sri Lanka among top 10 counties in Asia facing threats to cyber security”, DailyFT, June 8, 2016, http://www.ft.lk/article/546719/Sri-Lanka-among-top-10-countries-in-Asi….
- 13Lahiru Fernando, “Cyber-attack on several websites including Kuwait embassy,” Daily News, May 19, 2019, http://www.dailynews.lk/2019/05/19/local/186030/cyber-attack-several-we….
On Sri Lanka
See all data, scores & information on this country or territory.See More
Global Freedom Score55 100 partly free
Internet Freedom Score48 100 partly free
Freedom in the World StatusPartly Free